Lucene search

[email protected]CVE-2005-3267

HistoryOct 27, 2005 - 10:02 a.m.

CVE-2005-3267

2005-10-2710:02:00

CWE-189

[email protected]

web.nvd.nist.gov

cve-2005-3267

skype

client

integer overflow

denial of service

heap-based buffer overflow

nvd

7.1 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.056 Low

EPSS

Percentile

93.2%

JSON

Integer overflow in Skype client before 1.4.x.84 on Windows, before 1.3.x.17 on Mac OS, before 1.2.x.18 on Linux, and 1.1.x.6 and earlier allows remote attackers to cause a denial of service (crash) via crafted network data with a large Object Counter value, which leads to a resultant heap-based buffer overflow.

CPENameOperatorVersion
skype_technologies:skypeskype technologies skypeeq1.0.0.1
skype_technologies:skypeskype technologies skypeeq1.0.0.94
skype_technologies:skypeskype technologies skypeeq1.0.0.7
skype_technologies:skypeskype technologies skypeeq1.1.06
skype_technologies:skypeskype technologies skypeeq0.92.0.12
skype_technologies:skypeskype technologies skypeeq1.0.0.9
skype_technologies:skypeskype technologies skypeeq1.0.0.97
skype_technologies:skypeskype technologies skypeeq0.93.0.3
skype_technologies:skypeskype technologies skypeeq1.0.0.29
skype_technologies:skypeskype technologies skypeeq0.98.0.04

CPE	Name	Operator	Version
skype_technologies:skype	skype technologies skype	eq	1.0.0.1
skype_technologies:skype	skype technologies skype	eq	1.0.0.94
skype_technologies:skype	skype technologies skype	eq	1.0.0.7
skype_technologies:skype	skype technologies skype	eq	1.1.06
skype_technologies:skype	skype technologies skype	eq	0.92.0.12
skype_technologies:skype	skype technologies skype	eq	1.0.0.9
skype_technologies:skype	skype technologies skype	eq	1.0.0.97
skype_technologies:skype	skype technologies skype	eq	0.93.0.3
skype_technologies:skype	skype technologies skype	eq	1.0.0.29
skype_technologies:skype	skype technologies skype	eq	0.98.0.04

Rows per page:

1-10 of 181

References

marc.info/?l=bugtraq&m=113026202728568&w=2

secunia.com/advisories/17305/

securityreason.com/securityalert/115

skype.com/security/skype-sb-2005-03.html

www.kb.cert.org/vuls/id/905177

www.osvdb.org/20306

www.securityfocus.com/bid/15192

www.vupen.com/english/advisories/2005/2197

exchange.xforce.ibmcloud.com/vulnerabilities/22850

7.1 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.056 Low

EPSS

Percentile

93.2%

JSON

Related for CVE-2005-3267

cert1 openvas2 nessus3 freebsd1