News19,133 Articles

May 22, 2006

Skype patches security hole

Update your software now

James Niccolai

Skype is advising users to upgrade to a more recent version of its VoIP (voice over IP) software to fix a security bug reported late last week by a security researcher in New Zealand.

The bug affects several versions of the Skype client for Windows and could allow an attacker to download a file from an affected PC without permission. Skype rated the vulnerability 'medium risk'.

It stems from a flaw in the way the Skype client handles a type of URI (uniform resource indicator), which provide a standard way to access resources on the internet. Skype installs several URI handlers during a typical client installation.

To fall victim, a Skype user would have to be tricked into visiting a web page set up by the attacker, said Brett Moore, a security researcher with Security-Assessment.com, who was credited with finding the hole.

The attacker needs to know the location of the file he wants to transfer, and must also have added the victim to his contact list.

The bug affects all releases of Skype for Windows up to and including version 2.0.x.104, as well as version 2.5.x.0 up to and including 2.5.x.78. Skype advised users to upgrade to Skype 2.5, release 2.5.x.79 or later, or Skype 2.0, release 2.0.x.105 or later.

It's the first security bulletin issued by Skype in about seven months. Last year it issued three bulletins, two rated high risk and one low risk.

The latest bulletin is here.

An advisory from Security-Assessment.com, in PDF format, can be downloaded here.

Free whitepaper: Phishing for victims - Truth, myth and cybercrime

<<newer story | back to index | older story>>

What is this?

Subscribe to PC Advisor now and claim your FREE gift

Keep up to date by adding PC Advisor News to your iGoogle home page or Google Reader


Question of the day!

Does your smartphone replace your need for a laptop when on the move?

Question of the day!

Does your smartphone replace your need for a laptop when on the move?

% of PC Advisor readers agree with you

Yes
TBC
No
TBC

What tasks can your smartphone do that would have traditionally been done on a laptop?

119 characters remaining

Follow the conversation at @SmartphoneFocus

Mainly email but getting better at spreadsheets etc, RT @IDGdan

Google


Recent reviews

Reviews index


Latest reader comments

Latest reader comments


Top news

News index


Latest blog entries

Blogs index


 Our RSS feeds

Sponsored Content

  • Take the internet to new places with the Nokia N800
    Communicate how you want to, where you want to with instant messaging, email and internet calling. View movies, browse the internet wirelessly and watch TV on the high-resolution screen and listen through high-quality stereo speakers with headphone jack.
    Buy now