Attention "Skype" users
Monday, January 21, 2008
Security researcher Aviv Raff has discovered and demonstrated a flaw within Skype that allows malicious code to be run under certain circumstances. The problem is caused by Skype's web control. The program uses Internet Explorer to render internal and external HTML, but does so using "Local Zone" security settings.
The bug currently affects Skype v.3.6.0.244, and may be present in older versions of the client as well. At this point, the solution is to avoid running video searches via Skype. Simply having the program installed or using its various other functions will not expose a system to potential infection.
Labels: Security
