Security researcher Aviv Raff reported about new Skype vulnerability that could give the opportunity for hackers to insert malicious software onto a victim’s PC. Apparently the flaw has to do with the way that Skype makes use of a Windows Internet Explorer component to render HTML. Skype does not apply strict security controls to the software, an attacker could run scripting code on the victim’s system in a dangerous fashion and ultimately install malicious software. The flaw affects the latest version of Skype - version 3.6.0.244 and older versions may also be at risk. Skype has been reported about this problems so we’re expecting their reaction.
