CVE-2005-2300
https://notcve.org/view.php?id=CVE-2005-2300
Skype 1.1.0.20 and earlier allows local users to overwrite arbitrary files via a symlink attack on the skype_profile.jpg temporary file. Skype 1.1.0.20 y anteriores permite que usuarios locales sobreescriban ficheros arbitrarios mediante un ataque de enlaces simbólicos en el fichero temporal "skype_profile.jpg". • http://marc.info/?l=bugtraq&m=112156036013818&w=2 http://secunia.com/advisories/16105 http://www.zone-h.org/advisories/read/id=7808 •
CVE-2005-1407
https://notcve.org/view.php?id=CVE-2005-1407
Skype for Windows 1.2.0.0 to 1.2.0.46 allows local users to bypass the identity check for an authorized application, then call arbitrary Skype API functions by modifying or replacing that application. • http://www.skype.com/security/ssa-2005-01.html •
CVE-2004-1777
https://notcve.org/view.php?id=CVE-2004-1777
A "range check error" in Skype for Windows before 0.98.0.28 allows local and remote attackers to cause a denial of service (application crash) via long command line arguments or a long callto:// URL, a different vulnerability than CVE-2004-1114. • http://lists.virus.org/bugtraq-0406/msg00221.html http://securitytracker.com/id?1010490 http://www.osvdb.org/11860 http://www.skype.com/security/ssa-2004-01.html • CWE-20: Improper Input Validation •
CVE-2004-1114
https://notcve.org/view.php?id=CVE-2004-1114
Buffer overflow in the handling of command line arguments in Skype 1.0.x.94 through 1.0.x.98 allows remote attackers to execute arbitrary code via a callto:// URL with a long non-existent username, a different vulnerability than CVE-2004-1777. • http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/028852.html http://marc.info/?l=bugtraq&m=110062240706017&w=2 http://marc.info/?l=bugtraq&m=110067029422696&w=2 http://secunia.com/advisories/13191 http://www.osvdb.org/11786 http://www.securityfocus.com/bid/11682 http://www.skype.com/products/skype/windows/changelog.html http://www.skype.com/security/ssa-2004-02.html https://exchange.xforce.ibmcloud.com/vulnerabilities/18063 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •