[35300] in bugtraq
Skype URI callto username overflow
daemon@ATHENA.MIT.EDU (Hillel Himovich)
Tue Jun 15 08:52:44 2004
Date: 10 Jun 2004 00:46:45 -0000
Message-ID: <20040610004645.12250.qmail@www.securityfocus.com>
Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: binary
MIME-Version: 1.0
From: Hillel Himovich <hll@netvision.net.il>
To: bugtraq@securityfocus.com
Here is a cute little URI I found crashing skype on it's latest version (0.98.0.04).
It's proboby a buffer overflow of some sort, so, a special crafted URI culd potentionally lead to remote code execution.
(would probobly be extreamly hard doing it threw a URI, but still an option)
callto://aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/
If you really really want this not to happend to you, u shuld remove the reffering registry entrance to "callto://" in URI's
Regards,
Hillel Himovich
"HLL"
HLL@netvision.net.il
