CVE-2005-3267

Integer overflow in Skype client before 1.4.x.84 on Windows, before 1.3.x.17 on Mac OS, before 1.2.x.18 on Linux, and 1.1.x.6 and earlier allows remote…

published October 27, 2005

CVSS
—
EPSS
7%
Percentile
94.3
In the wild
Unconfirmed
What it is

⚠️ An integer overflow in the Skype client could cause a crash simply by sending malicious network data — like a prankster overloading a chat room with silly messages until everything freezes! Think of it as a restaurant where a waiter keeps taking orders but doesn't have enough kitchen staff to fulfill them. Eventually, the system just crashes under the pressure — nobody can eat or chat until it’s sorted out! If an attacker sends crafted data with a large Object Counter value, it results in a heap-based buffer overflow, crashing the Skype client. This means that users may suddenly lose access to their calls and chats — absolutely frustrating for anyone trying to communicate!

Put simply

Think of it as a restaurant where a waiter keeps taking orders but doesn't have enough kitchen staff to fulfill them. Eventually, the system just crashes under the pressure — nobody can eat or chat until it’s sorted out! The integer overflow vulnerability in Skype prior to certain versions on Windows, Mac, and Linux allows attackers to exploit the system through specially crafted network packets, leading to a denial of service.

What to do

If an attacker sends crafted data with a large Object Counter value, it results in a heap-based buffer overflow, crashing the Skype client. This means that users may suddenly lose access to their calls and chats — absolutely frustrating for anyone trying to communicate! Update Skype to the latest version immediately to protect against this vulnerability. Ensure users are running version 1.4.x.84 or higher for Windows, 1.3.x.17 or higher for Mac OS, and 1.2.x.18 or higher for Linux. Regularly check for software updates to stay secure. You've got this! Keeping your software updated will help you dodge this and other vulnerabilities like a pro! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07295 · 94.3th percentile
Published
2005-10-27T04:00Z
EPSS history
Timeline
  • 27 OCT 04:00Z
    Integer overflow in Skype client before 1.4.x.84 on Windows, before 1.3.x.17 on Mac OS, before 1.2.x.18 on Linux, and 1.1.x.6 and earlier allows remote…
    cvelistv5