News Document Title: ==================== Critical Pointer Vulnerability on Skype Software [FIXED!] Release Date: ============= 2011-08-22 Laboratory Article: =================== A critical pointer vulnerability is located in the macosx & windows version of skype. The bug/vulnerability is located in 2 input forms of an uni-code http search request to the skype search directory server. The vulnerability allows an local attacker to crash the complete skype process via an unknown unhandled software exception(memory-corruption). The bug allows an local attacker also to overwrite or read a new adress. Vulnerable: [+] MacOS v5.2.0.1523 [+] Windows (x32&x64) - v5.3.0.120 Author: http://www.vulnerability-lab.com/show.php?user=Rem0ve Advisory: http://www.vulnerability-lab.com/get_content.php?id=180