Lucene search

PRIOn knowledge basePRION:CVE-2008-1805

HistoryJun 06, 2008 - 10:32 p.m.

Design/Logic Flaw

2008-06-0622:32:00

PRIOn knowledge base

www.prio-n.com

7.7 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.056 Low

EPSS

Percentile

93.1%

JSON

Incomplete blacklist vulnerability in Skype 3.6.0.248, and other versions before 3.8.0.139, allows user-assisted remote attackers to bypass warning dialogs and possibly execute arbitrary code via a file: URI that ends in an executable extension that is not covered by the blacklist.

CPENameOperatorVersion
skypeeq3.2.0.148
skypeeq3.5.0.229
skypeeq3.0.0.198
skypeeq3.6.0.244
skypeeq3.5.0.234
skypeeq3.0.0.214
skypeeq3.2.0.145
skypeeq3.1.0.144
skypeeq3.2.0.82 beta
skypeeq3.5.0.178 beta

Name	Operator	Version
skype	eq	3.2.0.148
skype	eq	3.5.0.229
skype	eq	3.0.0.198
skype	eq	3.6.0.244
skype	eq	3.5.0.234
skype	eq	3.0.0.214
skype	eq	3.2.0.145
skype	eq	3.1.0.144
skype	eq	3.2.0.82 beta
skype	eq	3.5.0.178 beta

Rows per page:

1-10 of 431

References

labs.idefense.com/intelligence/vulnerabilities/display.php?id=711

secunia.com/advisories/30547

www.securityfocus.com/bid/29553

www.securitytracker.com/id?1020201

www.vupen.com/english/advisories/2008/1749/references

www.skype.com/security/skype-sb-2008-003.html

7.7 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.056 Low

EPSS

Percentile

93.1%

JSON

Related for PRION:CVE-2008-1805