Vulnerability in Skype

CVE-2004-1778

Skype 0.92.0.12 and 1.0.0.1 for Linux, and possibly other versions, creates the /usr/share/skype/lang directory with world-writable permissions, which allows local users to modify language files and possibly conduct social engineering or other attacks.

EPSS: 0.004 (31.6th percentile) — read the EPSS interpretation.

Affected products

  • Skype — versions 0.92.0.12, 1.0.0.1
  • N/a — versions n/a

Weakness classification (CWE)

References

  • cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, Mailing List, Third Party Advisory, Issue Tracking)
  • cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, Mailing List, Third Party Advisory, Issue Tracking)
  • cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, Broken Link, x_refsource_BID, Vendor Advisory)
  • cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_XF)