Welcome to WebProNews Breaking eBusiness and Search News
Advertise | Newsletter | Sitemap | News Feeds News Feed 
 WebProNews Search Part of the iEntry network iEntry inc. 

Skype Patches URL Handling Flaw

David A. Utter
Staff Writer
Published: 2006-05-22

WebProNews RSS Feed

A vulnerability in Skype's VoIP software could have permitted file transfers from one Skype user to another without requiring consent from the recipient.

The problem reported on the Secunia website has been addressed by Skype with a new patch posted to its website. Windows users running older versions of Skype were subject to the flaw, as described by Secunia:

The vulnerability is cause due to an error within the parsing of the parameters passed by the URI handler. This can be exploited to initiate the transfer of a file from one Skype user to another via a specially crafted Skype URL without requiring the sender to explicitly consent the action.

Successful exploitation requires that the user follows a malicious Skype URL and that the recipient has previously authorized the sender.

Secunia rated the problem as "moderately critical" due to the potential for malicious persons bypassing the security restrictions in Skype.

Skype first posted an advisory of the problem before the weekend. Although it was quickly fixed, the flaw still posed a small speed bump to Skype's recently announced plan to allow free calls to US and Canadian landline and cellphone numbers until the end of 2006.

The VoIP space has become more competitive, with Skype's offer and the launch of AOL's new AIM Phoneline service. AOL has been offering free inbound calls and voicemail to those who sign up for Phoneline and upgrade their AIM client to the latest beta version of AIM Triton.


Add to Del.icio.us | DiggThis | Yahoo! My Web | Furl

Bookmark WebProNews:

Receive Our Daily Email of Breaking eBusiness News

About the Author:
David Utter is a staff writer for WebProNews covering technology and business.

WebProNews RSS Feed

More Top News Articles

Contact WebProNews


Targeted Information for Business
WebProNews is part of the iEntry network

Internet Business: Marketing: Small Business:
WebProNews MarketingNewz SmallBusinessNewz
WebProWorld AdvertisingDay PromoteNews
EcommNewz SalesNewz EntrepreneurNewz

Software: Search Engines: Web Design:
WebMasterFree Jayde B2B DesignNewz
NetworkingFiles SearchZA FlashNewz
SecurityConfig SearchNewz WebSiteNotes

Developer: IT Management: Security:
DevWebPro ITManagement SecurityProNews
DevNewz SysAdminNews SecurityConfig
TheDevWeb NetworkingFiles NetworkNewz

The iEntry Network consists of over 100 web publications reaching millions of Internet Professionals. Contact us to advertise.

 Advertise | Contact Us | Corporate | Newsletter | Sitemap | Submit an Article | News Feeds
 WebProNews is an iEntry, Inc. ® publication - $line) { echo $line ; } ?> All Rights Reserved
About WebProNews
WebProNews is the number one source for eBusiness News. Over 5 million eBusiness professionals read WebProNews and other iEntry business and tech publications.

WebProNews provides real-time coverage of internet business.

Free Email Newsletters:
WebProNews SearchNewz
WebProWorld DevWebPro
Marketing SecurityNews
Plus over 100 other newsletters!

Send me relevant info on products and services.

Ten most recent posts.

Featured Software

WebProNews in the News
View all recent mentions of WebProNews from around the world!

Recent Articles On ...
Google eBusiness
Yahoo Ask Jeeves
MSN Blogs
Search Engines Blogging
Affiliate Programs Marketing
eCommerce Advertising
eBay Sun Microsystems
AOL Adsense
Microsoft Adwords
Oracle IBM
Amazon Apple
SEO iPod
Adsense XBox
PR Adobe

iEntry.com WebProWorld RSS Feed WebProWorld Contact WebProNews Print Version Email a friend Bookmark us