[ news_security_news ] Skype Fixes File-Transfer Security Flaw
Chris Crum Staff Writer
2006-05-22
Insider Reports RSS Feed
Older versions of Skype running on Windows machines were subject to a security flaw that would potentially allow malicious files to be transferred through the VoIP service.
The flaw would allow one user to send a file to another without permission from the recipient making for a dangerous security hole, but one that is now patched. According to CIO.com, It stems from a flaw in the way the Skype client handles a type of URI, or uniform resource indicator, which provide a standard way to access resources on the Internet. Skype installs several URI handlers during a typical client installation.
To fall victim, a Skype user would have to be tricked into visiting a webpage set up by the attacker, said Brett Moore, a security researcher with Security-Assessment.com, who was credited with finding the hole. The patch is available on Skype's website. David Utter shares more on the "moderately critical" vulnerability.
Add to | DiggThis | Yahoo! My Web
Technorati: skype
About the Author:
Chris Crum is a staff writer for SecurityProNews and WebProNews.
More news_security_news Articles
Insider Reports RSS Feed
|
|