The vulnerability could allow an attacker to use a specially crafted Skype URL to gain access to a system and execute code. For the vulnerability to be exploited, the user would need to click on the malicious link in another application.
Skype said that the vulnerability lies within the program's URI handler, a component that decodes file locations such as URLs.
A specially formatted URL could crash the application and possibly give the attacker the ability to install and run malware on a system.
Mac OS X versions of Skype 1.5.*.79 and earlier are all affected by the vulnerability, according to the company.
Skype recommends that users download the patch from the company's website or a trusted download site.
Security firm Secunia rated the vulnerability 'highly critical', its second-highest security level. The company credits security researcher Tom Ferris with originally exposing the vulnerability.
.png&h=140&w=231&c=1&s=0)
.png&h=140&w=231&c=1&s=0)
_page-0001.jpg&w=100&c=1&s=0)
.png&w=120&c=1&s=0)
Tech in Gov 2025
.png&w=120&c=1&s=0)
Security Exhibition & Conference 2025
Integrate Expo 2025
Digital As Usual Cybersecurity Roadshow: Brisbane edition
iTnews Benchmark Security Awards 2025
.jpg&h=140&w=231&c=1&s=0)
.jpg&h=140&w=231&c=1&s=0)
