CVE-2007-4429

Severity Score

5.0

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Unspecified vulnerability in Skype allows remote attackers to cause a denial of service (server hang) via unknown vectors related to sending long URIs, as claimed to be actively exploited on 20070817 using a "call to a specific number." NOTE: this identifier is for the en.securitylab.ru disclosure. According to the vendor, this issue is separate from the "sign-on issues" that reduced Skype service on 20070817, which appears to be a site-specific problem. As of 20070821, it is not clear whether this issue is simply a symptom of the larger sign-on problem.

Una vulnerabilidad no especificada en Skype, permite a atacantes remotos causar una denegación de servicio (suspensión del servidor) por medio de vectores desconocidos relacionados a el envío de URIs largos, como es afirmado para ser explotados activamente en 20070817 usando una "call to a specific number." NOTA: este identificador es para la divulgación de en.securitylab.ru. Según el proveedor, este problema es independiente de los "sign-on issues" que redujo el servicio de Skype en 20070817, lo que parece ser un problema específico del sitio. A partir de 20070821, no está claro si este problema es simplemente un síntoma de un problema de acceso mayor.

*Credits: N/A

CVSS Scores

NISTv2 5.0

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

None

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2007-08-20 CVE Reserved
2007-08-20 CVE Published
2024-08-07 CVE Updated
2024-08-07 First Exploit
2024-10-15 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CAPEC

References (11)

URL	Tag	Source
http://blogs.csoonline.com/the_skype_mystery_why_blame_the_august_windows_updates	X_refsource_misc
http://en.securitylab.ru/poc/extra/301419.php	X_refsource_misc
http://heartbeat.skype.com/2007/08/what_happened_on_august_16.html	X_refsource_misc
http://heartbeat.skype.com/2007/08/where_we_are_at_1100_gmt.html	X_refsource_misc
http://securityreason.com/securityalert/3032	Third Party Advisory
http://www.securityfocus.com/archive/1/476942/100/0/threaded	Mailing List
http://www.securityfocus.com/archive/1/477156/100/0/threaded	Mailing List
http://www.securityfocus.com/archive/1/477178/100/0/threaded	Mailing List
http://www.securityfocus.com/archive/1/477240/100/0/threaded	Mailing List
http://www.securitylab.ru/news/301422.php	X_refsource_misc

URL	Date	SRC
http://en.securitylab.ru/poc/301420.php	2024-08-07

URL	Date	SRC

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Skype Technologies Search vendor "Skype Technologies"		Skype Search vendor "Skype Technologies" for product "Skype"				*		-		Affected