exploit the possibilities

Skype 0 Day Exploitation

Skype 0 Day Exploitation
Posted Oct 17, 2011
Authored by Benjamin Kunz Mejri, Pim J.F. Campers | Site vulnerability-lab.com

Various Skype VoIP vulnerabilities have been discovered and disclosed at HITB Malaysia 2011.

tags | advisory, vulnerability
MD5 | d39dfe02cbe0b14347680834a61e6936

Skype 0 Day Exploitation

Change Mirror Download
Title:
======
Skype Software Vulnerabilities - 0 Day Exploitation 2011 [HACK IN THE BOX MALAYSIA #2011 KUL CONFERENCE] (13th)


Date:
=====
2011-10-16


References:
===========
Article: http://www.vulnerability-lab.com/get_content.php?id=293
Document: http://www.vulnerability-lab.com/resources/documents/293.pdf
Speaker: http://conference.hitb.org/hitbsecconf2011kul/?page_id=1757

Conference Mirror:
http://conference.hitb.org/hitbsecconf2011kul/materials/D2T1 - SKYPE SOFTWARE VULNERABILITIES - ZERO DAY EXPLOITATION 2011.zip



VL-ID:
=====
293


Status:
========
Published


Exploitation-Technique:
=======================
Report


Severity:
=========
Critical


Details:
========
SKYPE VOICE OVER IP - SOFTWARE VULNERABILITIES
TECHNIQUES & METHODS – ZERO DAY EXPLOITATION 2011
1. (Overview) Authors of the Skype Exploitation White-Paper
- 1.1 Pim J.F. Campers
- 1.2 Benjamin Kunz Mejri
2. (Preface) Information around the White-Paper & Skype
- 2.1 Infomercial
3. (Overview) Published Skype Vulnerabilities 2004-2010
- 3.1 URI Handler Skype Vulnerabilities
- 3.2 Denial of Service Skype Vulnerabilities
- 3.3 Creation & Deletion Skype Vulnerabilities
- 3.4 Buffer Overflow Skype Vulnerabilities
4. (How 2 Exploit & Detect?)
- 4.1 How to detect own Skype 0-day vulnerabilities?
- 4.2 How to exploit skype 0-day vulnerabilities out of the box?
- 4.2.1 Client Side Exploitation Map (Remote)
- 4.2.2 Server-Side 1 Exploitation Map (Remote & Local)
- 4.2.3 Server-Side 2 Exploitation Map (Remote & Local)
- 4.2.4 Pointer Exploitation Map (Local)
- 4.2.5 Exchange Buffer Overflow Map (Remote & Local)
- 4.2.7 Denial of Service Map (Local to Remote)
5.(Main Presentation) Presentation of own 0 day Skype Vulnerabilities
- 5.6 Skype v5.3.x v2.2.x v5.2.x – Denial of Service Vulnerability
- 5.2 Skype 5.3.x 2.2.x 5.2.x - Persistent Software Vulnerability
- 5.1 Skype 5.3.x 2.2.x 5.2.x - Persistent Profile XSS Vulnerability
- 5.5 Skype v5.2.x and v5.3.x – Memory Corruption Vulnerability
- 5.3 Skype v5.3.x - Transfer Standby Buffer Overflow Vulnerability
6. Skype Security & Time-Lines
- 6.1 Response, Fix/Patch > Time-Line
7. (Review) Security Session Videos
- 6.1 Skype (VoIP) - Denial of Service Vulnerability.wmv [HD]
- 6.2 Skype (VoIP) - Persistent Profile XSS Vulnerability [HD]
- 6.3 Skype (VoIP) - [Pointer Bug] Memory Corruption [HD]
8. Credits & Infomercial
- 8.1 Vulnerability Laboratory


Credits:
========
Vulnerability Research Laboratory - Benjamin Kunz Mejri (Rem0ve) & Pim J.F. Campers (X4lt)


Disclaimer:
===========
The information provided in this document is provided as it is without any warranty. Vulnerability-Lab disclaims all warranties,
either expressed or implied, including the warranties of merchantability and capability for a particular purpose. Vulnerability-
Lab or its suppliers are not liable in any case of damage, including direct, indirect, incidental, consequential loss of business
profits or special damages, even if Vulnerability-Lab or its suppliers have been advised of the possibility of such damages. Some
states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation
may not apply. Any modified copy or reproduction, including partially usages, of this file requires authorization from Vulnerability-
Lab. Permission to electronically redistribute this alert in its unmodified form is granted. All other rights, including the use of
other media, are reserved by Vulnerability-Lab or its suppliers.

Copyright © 2011|Vulnerability-Lab




--
Website: www.vulnerability-lab.com ; vuln-lab.com or vuln-db.com
Contact: admin@vulnerability-lab.com or support@vulnerability-lab.com

Comments

RSS Feed Subscribe to this comment feed

No comments yet, be the first!

Login or Register to post a comment

File Archive:

June 2019

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Jun 1st
    1 Files
  • 2
    Jun 2nd
    2 Files
  • 3
    Jun 3rd
    19 Files
  • 4
    Jun 4th
    21 Files
  • 5
    Jun 5th
    15 Files
  • 6
    Jun 6th
    12 Files
  • 7
    Jun 7th
    11 Files
  • 8
    Jun 8th
    1 Files
  • 9
    Jun 9th
    1 Files
  • 10
    Jun 10th
    15 Files
  • 11
    Jun 11th
    15 Files
  • 12
    Jun 12th
    15 Files
  • 13
    Jun 13th
    8 Files
  • 14
    Jun 14th
    16 Files
  • 15
    Jun 15th
    2 Files
  • 16
    Jun 16th
    1 Files
  • 17
    Jun 17th
    18 Files
  • 18
    Jun 18th
    15 Files
  • 19
    Jun 19th
    22 Files
  • 20
    Jun 20th
    14 Files
  • 21
    Jun 21st
    0 Files
  • 22
    Jun 22nd
    0 Files
  • 23
    Jun 23rd
    0 Files
  • 24
    Jun 24th
    0 Files
  • 25
    Jun 25th
    0 Files
  • 26
    Jun 26th
    0 Files
  • 27
    Jun 27th
    0 Files
  • 28
    Jun 28th
    0 Files
  • 29
    Jun 29th
    0 Files
  • 30
    Jun 30th
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2019 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close