| Package | Affected versions | Patched versions |
|---|---|---|
| skype | = 3.0.0.106= 3.0.0.123= 3.0.0.137= 3.0.0.154= 3.0.0.190= 3.0.0.198= 3.0.0.205= 3.0.0.209= 3.0.0.214= 3.0.0.216= 3.0.0.217= 3.0.0.218= 3.1.0.112= 3.1.0.134= 3.1.0.144= 3.1.0.147= 3.1.0.150= 3.1.0.152= 3.2.0.115= 3.2.0.145= 3.2.0.148= 3.2.0.152= 3.2.0.158= 3.2.0.163= 3.2.0.175= 3.2.0.53= 3.2.0.63= 3.2.0.82= 3.5.0.107= 3.5.0.158= 3.5.0.178= 3.5.0.202= 3.5.0.214= 3.5.0.229= 3.5.0.234= 3.5.0.239= 3.6.0.127= 3.6.0.159= 3.6.0.216= 3.6.0.244= 3.6.0.248= 3.8.0.96≤ 3.8.0.115 |
Skype 3.6.0.248, and other versions before 3.8.0.139, uses a case-sensitive comparison when checking for dangerous extensions, which allows user-assisted remote attackers to bypass warning dialogs and possibly execute arbitrary code via a file: URI with a dangerous extension that uses a different case.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free