Filed Under (Internet, Software, security) by Telix on January-23-2008

After reports about new Skype flaw, Skype team has been forced to turn off a video-sharing feature as act of preventing attackers exploiting a software flaw to launch a self-copying worm attack against other Skype users. The software bug, reported last week by security researcher Aviv Raff, stems from the way Skype uses an Internet Explorer component to render HTML. Skype’s video-sharing feature allows users to share videos hosted on two sites - Dailymotion.com and Metacafe.com - while chatting with other Skype users. Video sharing website Metacafe had a cross-site scripting flaw that could allow hackers to run JavaScript on Metacafe.com and install unauthorised software on the victim’s computer. After that attackers could forward links to the malicious web page to all of the Skype contacts in the victim’s computer, spreading the infection.





Post a comment
Name: 
Email: 
URL: 
Comments: