Skype for Windows vulnerability that allows remote code execution fixed in v7.37

Topic

New Reply

From https://www.theregister.co.uk/2017/06/27/skype_vuln/:

“Infosec researchers have discovered a nasty and exploitable security vulnerability in older versions of Skype on Windows.

The stack buffer overflow flaw allows miscreants to inject malicious code into Windows boxes running older versions of Skype, bug hunters at Vulnerability Laboratory warn:”

1 user thanked author for this post.

HiFlyer

Reply | Quote

Replies

Microsoft doesn’t list this vulnerability as being fixed at https://support.skype.com/en/faq/FA34509/what-s-new-in-skype-for-windows-desktop.

Reply | Quote

version 7.37 mentioned on website but version 7.38 now available?

Win10 22H2 Pro, MBAM Premium, Firefox, OpenOffice, Sumatra PDF.

1 user thanked author for this post.

HiFlyer

Reply | Quote

Right. There is often a lag in the Skype changelog documentation.

1 user thanked author for this post.

HiFlyer

Reply | Quote