CVE-2007-4429

Unspecified vulnerability in Skype allows remote attackers to cause a denial of service (server hang) via unknown vectors related to sending long URIs, as claimed to be actively exploited on 20070817 using a "call to a specific number." NOTE: this identifier is for the en.securitylab.ru disclosure. According to the vendor, this issue is separate from the "sign-on issues" that reduced Skype service on 20070817, which appears to be a site-specific problem. As of 20070821, it is not clear whether this issue is simply a symptom of the larger sign-on problem.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

2.20% chance of exploitation in the next 30 days, 81th percentile

Published

2007-08-20

Updated

2024-08-07

Proof-of-concept exploits (6)

• http://en.securitylab.ru/poc/301420.php
• http://en.securitylab.ru/poc/extra/301419.php
• http://www.securityfocus.com/archive/1/477156/100/0/threaded
• http://www.securityfocus.com/archive/1/477240/100/0/threaded
• http://www.securityfocus.com/archive/1/477178/100/0/threaded
• http://www.securityfocus.com/archive/1/476942/100/0/threaded

References

• CVE Record
• NVD entry

Related

• CVE-2007-4420
• CVE-2007-4430
• CVE-2007-4419
• CVE-2007-4434
• CVE-2007-4391
• CVE-2007-4439