News Document Title: ==================== New Skype 0 Day Vulnerabilities - Accepted by Vendor (Verified) Release Date: ============= 2011-07-08 Laboratory Article: =================== We are happy to announce some good news around the new Skype bugs. Skype Security team accepted the Skype Vulnerabilities and is providing the updates as soon as possible. Skype is actually providing no date to fix the different vulnerabilities. Author: Vulnerability Research Laboratory - Benjamin Kunz Mejri Affected: Windows v5.3.0.120 and older versions MacOS v5.2.0.1523 and older versions Linux 2.2.0.35.x and older versions Skype 5.3.x 2.2.x 5.2.x - Persistent XSS Vulnerability - High - Verified and Accepted by Vendor Skype 5.3.x 2.2.x 5.2.x - Persistent Software Vulnerability - High - Verified and Accepted by Vendor Skype v5.3.x - Transfer Standby Buffer Overflow Vulnerability - High - Accepted by Vendor Skype v5.2.x and v5.3.x - Critical Pointer Vulnerability - Critical - Verified and Accepted by Vendor Skype v5.3.x v2.2.x v5.2.x - Denial of Service Vulnerability - Medium(+) - Verified and Accepted by Vendor Upcoming: http://www.vulnerability-lab.com/upcoming.php