Approved changes feed: RSS · Atom
cpe:2.3:a:skype_technologies:skype:3.6:*:*:*:*:*:*:*part: a version: 3.6 update: *
| Vendor | Skype Technologies (c0c0eb66-a68b-52b3-8caa-e7d53d0da995) |
|---|---|
| Product | Skype (a4f4e3f8-4373-5ae7-8357-35b5db66a2bf) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2008-0583 |
vulnerable | 2026-06-08 04:50:17.178304 |
Details available
Cross-zone scripting vulnerability in the Internet Explorer web control in Skype 3.6.0.244, and earlier 3.5.x and 3.6.x versions, on Windows allows user-assisted remote attackers to inject arbitrary web script or HTML in the Local Machine Zone via the Description and unspecified other metadata fields of a Metacafe movie submitted by Metacafe Pro to the Skype video gallery, accessible through a search within the (1) "Add video to chat" or (2) "Add video to mood" dialog, a different vector than CVE-2008-0454.
Published: 2008-02-05T02:00:00.000Z
Updated: 2024-08-07T07:54:21.649Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-0582 |
vulnerable | 2026-06-08 04:50:17.177327 |
Details available
Cross-zone scripting vulnerability in the Internet Explorer web control in Skype 3.1 through 3.6.0.244 on Windows allows remote attackers to inject arbitrary web script or HTML in the Local Machine Zone via the Full Name field of a reviewer of a business item entry, accessible through (1) the SkypeFind dialog and (2) a skype:?skypefind URI for the skype: URI handler.
Published: 2008-02-05T02:00:00.000Z
Updated: 2024-08-07T07:54:21.628Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-0454 |
vulnerable | 2026-06-08 04:50:11.120954 |
Details available
Cross-zone scripting vulnerability in the Internet Explorer web control in Skype 3.6.0.244, and earlier 3.5.x and 3.6.x versions, on Windows allows user-assisted remote attackers to inject arbitrary web script or HTML in the Local Machine Zone via the Title field of a (1) Dailymotion and possibly (2) Metacafe movie in the Skype video gallery, accessible through a search within the "Add video to chat" dialog, aka "videomood XSS."
Published: 2008-01-25T00:00:00.000Z
Updated: 2024-08-07T07:46:54.655Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.