Integer overflow in Skype client before 1.4.x.84 on Windows, before 1.3.x.17 on Mac OS, before 1.2.x.18 on Linux, and 1.1.x.6 and earlier allows remote attackers to cause a denial of service (crash) via crafted network data with a large Object Counter value, which leads to a resultant heap-based buffer overflow.

A Secunia Advisory reports :

Some vulnerabilities have been reported in Skype, which can be exploited by malicious people to cause a DoS or to compromise a user's system.

The remote host is running Skype, a peer-to-peer voice over IP software. 

The remote version of this software is vulnerable to a heap overflow in the handling of its data structures.  An attacker can exploit this flaw by sending a specially crafted network packet to UDP or TCP ports Skype is listening on. A successful exploitation of this flaw will result in code execution on the remote host. 

In addition, Skype has been reported to contain overflows in the handling of VCards and callto/skype URLs. However, Nessus has not checked for them.

The remote host is running Skype, a peer-to-peer, voice-over-IP software.

The remote version of this software is vulnerable to a heap overflow in the handling of its data structures. An attacker can exploit this flaw by sending a specially crafted network packet to UDP or TCP ports Skype is listening on.

Successful exploitation of this issue may result in a crash of the Skype user client or code execution on the remote host.

The remote host is using Skype, a peer-to-peer chat and VoIP software. The remote version of this software contains multiple flaws that would allow an attacker to overflow memory buffers and either cause the service to stop or execute arbitrary code.

ID	Name	Product	Family	Severity
21451	FreeBSD : skype -- multiple buffer overflow vulnerabilities (70fc13d9-4ab4-11da-932d-00055d790c25)	Nessus	FreeBSD Local Security Checks	critical
21209	Skype < 1.4.0.84 Multiple Vulnerabilities (uncredentialed check)	Nessus	Windows	critical
20090	Skype < 1.4.0.84 Multiple Remote Overflows (credentialed check)	Nessus	Windows	critical
3268	Skype Technologies Multiple Buffer Overflows	Nessus Network Monitor	Internet Messengers	critical

Detections

Analytics

CVE-2005-3267

medium

Tenable Plugins

critical

critical

critical

critical