Lucene search
MitreCVE-2005-1407HistoryMay 03, 2005 - 4:00 a.m.
CVE-2005-1407
2005-05-0304:00:00
mitre
web.nvd.nist.gov
21
cve-2005-1407
skype
windows
local users
identity check
api functions
security vulnerability
CVSS2
4.6
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.9
Confidence
Low
EPSS
0
Percentile
5.1%
Skype for Windows 1.2.0.0 to 1.2.0.46 allows local users to bypass the identity check for an authorized application, then call arbitrary Skype API functions by modifying or replacing that application.
Affected configurations
Node
skype_technologiesskypeMatch1.2.0.0
ORskype_technologiesskypeMatch1.2.0.37
ORskype_technologiesskypeMatch1.2.0.41
ORskype_technologiesskypeMatch1.2.0.46
| Vendor | Product | Version | CPE |
|---|---|---|---|
| skype_technologies | skype | 1.2.0.0 | cpe:2.3:a:skype_technologies:skype:1.2.0.0:*:*:*:*:*:*:* |
| skype_technologies | skype | 1.2.0.37 | cpe:2.3:a:skype_technologies:skype:1.2.0.37:*:*:*:*:*:*:* |
| skype_technologies | skype | 1.2.0.41 | cpe:2.3:a:skype_technologies:skype:1.2.0.41:*:*:*:*:*:*:* |
| skype_technologies | skype | 1.2.0.46 | cpe:2.3:a:skype_technologies:skype:1.2.0.46:*:*:*:*:*:*:* |
References
CVSS2
4.6
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.9
Confidence
Low
EPSS
0
Percentile
5.1%
Related for CVE-2005-1407