26 Oct 2005
Skype has patched three security holes in its software, rated 'highly critical' by vulnerability testing organisation Secunia.
The flaws include a buffer overflow that could be used to direct users to a specially crafted URL, a flaw in the handling of VCARD information that could allow a system takeover, and a heap-based buffer overflow that could be used to crash the VoIP application.
British security testing specialist Pentest said that the flaws took a week to fix. Its researchers found the flaws on 18 October and reported it to Skype, which released an upgrade last night.
The flaws affect all versions of Skype prior to version 1.4.83 and affect the Windows, Linux, Mac and Pocket PC platform code.
The patched version of Skype is available for download here.
Latest stories from Communications
Related articles
Related jobs
Poll
What is the most important IT priority for your company this year?
Connect with V3.co.uk
This paper focuses on a series of best practices and techniques for development teams looking to improve their software development processes
Why good data management at all levels is essential in the modern business (video, 6mins)
A global consultancy is looking for a technical IT infrastructure...
External Technical Engineer, Rochdale This Lancashire...
Contract: L3 Solaris Administrator - Stockholm, Sweden...
C# or VB.NET Senior Developer / Team Leader x 2- Manchester...
Keep up to date with the latest products, services and technologies from the world's leading IT companies. IThound.com brings you over 2,000 white papers, case studies and analyst reports.
Do you agree?