Approved changes feed: RSS · Atom

cpe:2.3:a:skype_technologies:skype:3.6.0.244:*:*:*:*:*:*:*

part: a version: 3.6.0.244 update: *

VendorSkype Technologies (c0c0eb66-a68b-52b3-8caa-e7d53d0da995)
ProductSkype (a4f4e3f8-4373-5ae7-8357-35b5db66a2bf)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-2545 vulnerable 2026-06-08 04:50:31.190599 Details available
Skype 3.6.0.248, and other versions before 3.8.0.139, uses a case-sensitive comparison when checking for dangerous extensions, which allows user-assisted remote attackers to bypass warning dialogs and possibly execute arbitrary code via a file: URI with a dangerous extension that uses a different case.
Published: 2008-06-06T22:00:00.000Z
Updated: 2024-08-07T09:05:29.862Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1805 vulnerable 2026-06-08 04:50:21.973566 Details available
Incomplete blacklist vulnerability in Skype 3.6.0.248, and other versions before 3.8.0.139, allows user-assisted remote attackers to bypass warning dialogs and possibly execute arbitrary code via a file: URI that ends in an executable extension that is not covered by the blacklist.
Published: 2008-06-06T22:00:00.000Z
Updated: 2024-08-07T08:32:01.563Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0582 vulnerable 2026-06-08 04:50:17.177833 Details available
Cross-zone scripting vulnerability in the Internet Explorer web control in Skype 3.1 through 3.6.0.244 on Windows allows remote attackers to inject arbitrary web script or HTML in the Local Machine Zone via the Full Name field of a reviewer of a business item entry, accessible through (1) the SkypeFind dialog and (2) a skype:?skypefind URI for the skype: URI handler.
Published: 2008-02-05T02:00:00.000Z
Updated: 2024-08-07T07:54:21.628Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.