CVE-2008-2545

Skype 3.6.0.248, and other versions before 3.8.0.139, uses a case-sensitive comparison when checking for dangerous extensions, which allows user-assisted remote attackers to bypass warning dialogs and possibly execute arbitrary code via a file: URI with a dangerous extension that uses a different case.

Link	Resource
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=711
http://www.skype.com/security/skype-sb-2008-003.html	Patch
http://www.securityfocus.com/bid/29553
http://www.securitytracker.com/id?1020201
http://secunia.com/advisories/30547
http://www.vupen.com/english/advisories/2008/1749/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/43044

Configuration 1

cpe:2.3:a:skype_technologies:skype:3.2.0.148:*:*:*:*:*:*:* cpe:2.3:a:skype_technologies:skype:3.5.0.229:*:*:*:*:*:*:* cpe:2.3:a:skype_technologies:skype:3.0.0.198:*:*:*:*:*:*:* cpe:2.3:a:skype_technologies:skype:3.6.0.244:*:*:*:*:*:*:* cpe:2.3:a:skype_technologies:skype:3.5.0.234:*:*:*:*:*:*:* cpe:2.3:a:skype_technologies:skype:3.0.0.214:*:*:*:*:*:*:* cpe:2.3:a:skype_technologies:skype:3.2.0.145:*:*:*:*:*:*:* cpe:2.3:a:skype_technologies:skype:3.1.0.144:*:*:*:*:*:*:* cpe:2.3:a:skype_technologies:skype:3.2.0.82:beta:*:*:*:*:*:* cpe:2.3:a:skype_technologies:skype:3.5.0.178:beta:*:*:*:*:*:* cpe:2.3:a:skype_technologies:skype:3.1.0.147:*:*:*:*:*:*:* cpe:2.3:a:skype_technologies:skype:3.5.0.214:*:*:*:*:*:*:* cpe:2.3:a:skype_technologies:skype:3.1.0.112:beta:*:*:*:*:*:* cpe:2.3:a:skype_technologies:skype:3.0.0.217:*:*:*:*:*:*:* cpe:2.3:a:skype_technologies:skype:3.2.0.115:beta:*:*:*:*:*:* cpe:2.3:a:skype_technologies:skype:3.2.0.63:beta:*:*:*:*:*:* cpe:2.3:a:skype_technologies:skype:3.5.0.158:beta:*:*:*:*:*:* cpe:2.3:a:skype_technologies:skype:3.8.0.96:beta:*:*:*:*:*:* cpe:2.3:a:skype_technologies:skype:3.0.0.106:beta:*:*:*:*:*:* cpe:2.3:a:skype_technologies:skype:3.0.0.205:*:*:*:*:*:*:* cpe:2.3:a:skype_technologies:skype:3.0.0.216:*:*:*:*:*:*:* cpe:2.3:a:skype_technologies:skype:3.0.0.209:*:*:*:*:*:*:* cpe:2.3:a:skype_technologies:skype:3.2.0.53:beta:*:*:*:*:*:* cpe:2.3:a:skype_technologies:skype:3.5.0.107:beta:*:*:*:*:*:* cpe:2.3:a:skype_technologies:skype:3.6.0.248:*:*:*:*:*:*:* cpe:2.3:a:skype_technologies:skype:3.6.0.127:beta:*:*:*:*:*:* cpe:2.3:a:skype_technologies:skype:3.2.0.158:*:*:*:*:*:*:* cpe:2.3:a:skype_technologies:skype:3.6.0.216:*:*:*:*:*:*:* cpe:2.3:a:skype_technologies:skype:3.0.0.190:*:*:*:*:*:*:* cpe:2.3:a:skype_technologies:skype:3.2.0.163:*:*:*:*:*:*:* cpe:2.3:a:skype_technologies:skype:3.0.0.154:beta:*:*:*:*:*:* cpe:2.3:a:skype_technologies:skype:3.5.0.239:*:*:*:*:*:*:* cpe:2.3:a:skype_technologies:skype:3.2.0.152:*:*:*:*:*:*:* cpe:2.3:a:skype_technologies:skype:3.6.0.159:beta:*:*:*:*:*:* cpe:2.3:a:skype_technologies:skype:*:*:*:*:*:*:*:* cpe:2.3:a:skype_technologies:skype:3.1.0.152:*:*:*:*:*:*:* cpe:2.3:a:skype_technologies:skype:3.0.0.137:beta:*:*:*:*:*:* cpe:2.3:a:skype_technologies:skype:3.1.0.134:beta:*:*:*:*:*:* cpe:2.3:a:skype_technologies:skype:3.0.0.218:*:*:*:*:*:*:* cpe:2.3:a:skype_technologies:skype:3.2.0.175:*:*:*:*:*:*:* cpe:2.3:a:skype_technologies:skype:3.0.0.123:beta:*:*:*:*:*:* cpe:2.3:a:skype_technologies:skype:3.5.0.202:*:*:*:*:*:*:* cpe:2.3:a:skype_technologies:skype:3.1.0.150:*:*:*:*:*:*:*

---

Published : 2008-06-06 10:32

Updated : 2017-08-08 01:31

---

NVD link : CVE-2008-2545

Mitre link : CVE-2008-2545

No products.

CWE-20