OSVDB ID: 84089 Title: Skype Pre-crash Arbitrary User Private Instant Message Disclosure |
Info |
|
|
Dates |
||||
|
|
Description |
Skype contains a flaw that may lead to an unauthorized information disclosure. The issue occurs when the program is in a state of crashing, and may send a private message intended for one person to another on your contact list. Reports indicate this may be sporadic behavior, and may not be controllable by an attacker. However, sensitive messages may be disclosed to someone that you did not intend to receive them. |
Classification |
Location:
Remote / Network Access
Attack Type: Information Disclosure, Race Condition Impact: Loss of Confidentiality Solution: Upgrade Exploit: Exploit Public Disclosure: Vendor Verified |
Solution |
Upgrade to version 4.0.0.8 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds. |
Products |
|
References |
Credit |
Unknown or Incomplete |