Lucene search
HistoryMay 03, 2005 - 4:00 a.m.
CVE-2005-1407
CVSS2
4.6
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.5
Confidence
High
EPSS
0
Percentile
5.1%
Skype for Windows 1.2.0.0 to 1.2.0.46 allows local users to bypass the identity check for an authorized application, then call arbitrary Skype API functions by modifying or replacing that application.
Affected configurations
Node
skype_technologiesskypeMatch1.2.0.0
ORskype_technologiesskypeMatch1.2.0.37
ORskype_technologiesskypeMatch1.2.0.41
ORskype_technologiesskypeMatch1.2.0.46
| Vendor | Product | Version | CPE |
|---|---|---|---|
| skype_technologies | skype | 1.2.0.0 | cpe:2.3:a:skype_technologies:skype:1.2.0.0:*:*:*:*:*:*:* |
| skype_technologies | skype | 1.2.0.37 | cpe:2.3:a:skype_technologies:skype:1.2.0.37:*:*:*:*:*:*:* |
| skype_technologies | skype | 1.2.0.41 | cpe:2.3:a:skype_technologies:skype:1.2.0.41:*:*:*:*:*:*:* |
| skype_technologies | skype | 1.2.0.46 | cpe:2.3:a:skype_technologies:skype:1.2.0.46:*:*:*:*:*:*:* |
References
CVSS2
4.6
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.5
Confidence
High
EPSS
0
Percentile
5.1%
Related for NVD:CVE-2005-1407