Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Incomplete blacklist vulnerability in Skype 3.6.0.248, and other versions before 3.8.0.139, allows user-assisted remote attackers to bypass warning dialogs and possibly execute arbitrary code via a file: URI that ends in an executable extension that is not covered by the blacklist.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Skype file:// URI处理器 输入验证漏洞
Vulnerability Description
Skype for Android是美国微软（Microsoft）公司的一套基于Android平台下的免费的语音通讯软件。该软件支持视频短信、语音信箱、蓝牙耳机、电话会议等功能。 Skype的file:// URI处理器在处理可执行的下载时存在漏洞，攻击者可能利用此漏洞绕过检查过滤。 Skype的file:// URI处理器会对URL执行检查以确认链接中没有包含与可执行文件格式相关的文件扩展名。如果链接中包含有黑名单所列出的文件扩展名，就会向用户显示一个警告对话框。由于执行检查时的逻辑错误，攻击者可以绕过
CVSS Information
N/A
Vulnerability Type
N/A