Skype patches Mac OS X security flaw

- Listen Flash
- Listen MP3
- Subscribe to this Podcast
- What is this?
- powered by
- sponsored by

Vulnerability could allow for URL attacks.

Skype has release a patch for a vulnerability in its VoIP software for Mac OS X. The flaw does not affect Windows, Linux or PocketPC versions of Skype.

The vulnerability could allow an attacker to use a specially crafted Skype URL to gain access to a system and execute code. For the vulnerability to be exploited, the user would need to click on the malicious link in another application.

Skype said that the vulnerability lies within the program's URI handler, a component that decodes file locations such as URLs.

A specially formatted URL could crash the application and possibly give the attacker the ability to install and run malware on a system.

Mac OS X versions of Skype 1.5.*.79 and earlier are all affected by the vulnerability, according to the company.

Skype recommends that users download the patch from the company's website or a trusted download site.

Security firm Secunia rated the vulnerability 'highly critical', its second-highest security level. The company credits security researcher Tom Ferris with originally exposing the vulnerability.

Ads by Google

Add Comment >>

Product Reviews

	ForeScout Technologies CounterACT The ForeScout CounterACT was the device which took the most time to install and configure.

	SonicWALL Aventail EX-1600 The Aventail EX-1600 is a high-end SSL VPN designed for the needs of medium to large enterprises.

	Sophos NAC Advanced The Sophos NAC Advanced product is a well-designed offering which balances the need for ease of...

	Kerio WinRoute Firewall 6.4 The Kerio WinRoute Firewall is an interesting product for this category.

	BEC Technologies Billion BiGuard S6000 The BiGuard S6000 extends the network to the remote user with features such as Network Extender, Transport...