Back to KEVs

CVE-2007-4429

Unspecified vulnerability in Skype allows remote attackers to cause a denial of service (server hang) via unknown vectors related to sending long...

Basic Information

CVE State
PUBLISHED
Reserved Date
August 20, 2007
Published Date
August 20, 2007
Last Updated
August 07, 2024
Vendor
Skype
Product
Skype
Description
Unspecified vulnerability in Skype allows remote attackers to cause a denial of service (server hang) via unknown vectors related to sending long URIs, as claimed to be actively exploited on 20070817 using a "call to a specific number." NOTE: this identifier is for the en.securitylab.ru disclosure. According to the vendor, this issue is separate from the "sign-on issues" that reduced Skype service on 20070817, which appears to be a site-specific problem. As of 20070821, it is not clear whether this issue is simply a symptom of the larger sign-on problem.

CVSS Scores

CVSS v2.0

5.0

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploit Status

Exploited in the Wild
Yes (2007-08-20 19:00:00 UTC) Source

References

http://www.securityfocus.com/archive/1/477156/100/0/threaded http://www.securityfocus.com/archive/1/477240/100/0/threaded http://securityreason.com/securityalert/3032 http://en.securitylab.ru/poc/extra/301419.php http://heartbeat.skype.com/2007/08/what_happened_on_august_16.html http://blogs.csoonline.com/the_skype_mystery_why_blame_the_august_windows_updates http://www.securitylab.ru/news/301422.php http://heartbeat.skype.com/2007/08/where_we_are_at_1100_gmt.html http://en.securitylab.ru/poc/301420.php http://www.securityfocus.com/archive/1/477178/100/0/threaded http://www.securityfocus.com/archive/1/476942/100/0/threaded

Known Exploited Vulnerability Information

Source Added Date
CVE 2007-08-20 19:00:00 UTC

Timeline

  • CVE ID Reserved

  • CVE Published to Public

  • Added to KEVIntel