Zero-day Skype flaw causes crashes, remote code execution

  • 27 June 2017
  • 0 replies
  • 194 views

Userlevel 7
Badge +54
The critical flaw doesn't require any user interaction, either.
 
                                               http://zdnet2.cbsistatic.com/hub/i/r/2017/06/27/9726c60a-708a-466b-a1df-f5e557bdea47/resize/370xauto/68216f0678f3522ac0aecc353d90e174/screen-shot-2017-06-27-at-09-41-02.jpg
 By Charlie Osborne for Zero Day | June 27, 2017
 
A critical flaw in Microsoft's Skype web messaging and call service allows attackers to crash systems and execute code.
 
This week, Vulnerability Lab security researcher Benjamin Kunz Mejri revealed the previously unknown vulnerability in a public security disclosure, saying the stack buffer overflow flaw, CVE-2017-9948, impacts Skype versions 7.2, 7.35, and 7.36.
 
Full Article.

0 replies

Be the first to reply!

Reply