Unspecified vulnerability in the skype4com URI handler in Skype before 3.6 GOLD allows remote attackers to execute arbitrary code via "short string values" that result in heap corruption.
http://www.zerodayinitiative.com/advisories/ZDI-07-070.html
http://www.vupen.com/english/advisories/2007/4110
http://www.securityfocus.com/bid/26748
http://www.securityfocus.com/archive/1/484703/100/0/threaded
http://securitytracker.com/id?1019056
http://securityreason.com/securityalert/3440