----------------------------------------------------------------------

A new version (0.9.0.0 - Release Candidate 1) of the free Secunia PSI
has been released. The new version includes many new and advanced
features, which makes it even easier to stay patched.

Download and test it today:
https://psi.secunia.com/

Read more about this new version:
https://psi.secunia.com/?page=changelog

----------------------------------------------------------------------

TITLE:
Skype Cross-Zone Scripting Security Enhancement

SECUNIA ADVISORY ID:
SA28791

VERIFY ADVISORY:
http://secunia.com/advisories/28791/

CRITICAL:
Highly critical

IMPACT:
System access

WHERE:
>From remote

SOFTWARE:
Skype for Windows 3.x
http://secunia.com/product/12919/
Skype for Windows 2.x
http://secunia.com/product/7268/
Skype for Windows 1.x
http://secunia.com/product/4250/

DESCRIPTION:
An update has been released for Skype, which implements security
enhancements to prevent compromise of users' systems.

Skype uses the Internet Explorer web control to render HTML from
certain websites (e.g. DailyMotion, Metacafe, and SkypeFind). As the
content is rendered in the "Local Machine" security zone, this allows
execution of arbitrary script code on a user's system via script
insertion vulnerabilities present in these websites.

Various vulnerabilities have been discovered in these sites, which
provide vectors when a user e.g. uses the Skype video gallery browser
section or finds a video uploaded to the DailyMotion gallery with a
specially crafted video title.

Successful exploitation requires that a displayed website is
vulnerable to script insertion.

The vulnerability is reported in the following Skype for Windows
versions:
- All versions including 3.5.*
- Version 3.6.*.244 and prior

SOLUTION:
Update or upgrade to version 3.6.*.248 or later, which now runs the
Internet Explorer web control in the "Internet" security zone.

http://www.skype.com/download/skype/windows/

PROVIDED AND/OR DISCOVERED BY:
Aviv Raff

ORIGINAL ADVISORY:
Skype:
http://www.skype.com/security/skype-sb-2008-001-update2.html
http://www.skype.com/intl/en/security/skype-sb-2008-002.html
http://www.skype.com/intl/en/security/skype-sb-2008-001-update1.html
http://www.skype.com/intl/en/security/skype-sb-2008-001.html

Aviv Raff:
http://aviv.raffon.net/2008/01/17/SkypeCrosszoneScriptingVulnerability.aspx
http://aviv.raffon.net/2008/01/31/AttackersCanSkypeFindYou.aspx

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------