FKIE_CVE-2011-2074

Vulnerability from fkie_nvd - Published: 2011-05-10 18:55 - Updated: 2026-06-16 23:30
Severity
Summary
Unspecified vulnerability in the client in Skype 5.x before 5.1.0.922 on Mac OS X allows remote authenticated users to execute arbitrary code or cause a denial of service (application crash) via a crafted message.
References
cve@mitre.orghttp://blogs.skype.com/security/2011/05/security_vulnerability_in_mac.htmlPatch
cve@mitre.orghttp://isc.sans.edu/diary.html?storyid=10837
cve@mitre.orghttp://secunia.com/advisories/44522Vendor Advisory
cve@mitre.orghttp://www.purehacking.com/blogs/gordon-maddern/skype-0day-vulnerabilitiy-discovered-by-pure-hacking
cve@mitre.orghttp://www.securityfocus.com/bid/47747
cve@mitre.orghttp://www.theregister.co.uk/2011/05/06/skype_for_mac_critical_vulnerability/
cve@mitre.orghttp://www.vupen.com/english/advisories/2011/1192Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://blogs.skype.com/security/2011/05/security_vulnerability_in_mac.htmlPatch
af854a3a-2127-422b-91ae-364da2661108http://isc.sans.edu/diary.html?storyid=10837
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/44522Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.purehacking.com/blogs/gordon-maddern/skype-0day-vulnerabilitiy-discovered-by-pure-hacking
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/47747
af854a3a-2127-422b-91ae-364da2661108http://www.theregister.co.uk/2011/05/06/skype_for_mac_critical_vulnerability/
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2011/1192Vendor Advisory
Impacted products
Vendor Product Version
skype skype 5.0.0.105
skype skype 5.0.0.105
skype skype 5.0.0.123
skype skype 5.0.0.152
skype skype 5.0.0.156
skype skype 5.1.0.104
skype skype 5.1.0.112
apple mac_os_x *
To clipboard 

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:skype:skype:5.0.0.105:*:*:*:*:*:*:*",
              "matchCriteriaId": "F17A54D5-36B9-43AB-AAAB-50060AB06841",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:skype:skype:5.0.0.105:beta:*:*:*:*:*:*",
              "matchCriteriaId": "0D24C8F2-480C-4263-A3AD-B0DD6D2E1479",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:skype:skype:5.0.0.123:beta:*:*:*:*:*:*",
              "matchCriteriaId": "B1755686-6370-4924-B3EC-2C55E15F64F4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:skype:skype:5.0.0.152:*:*:*:*:*:*:*",
              "matchCriteriaId": "9776A81C-2D3A-40F1-BD03-BDD1FF084BE7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:skype:skype:5.0.0.156:*:*:*:*:*:*:*",
              "matchCriteriaId": "5561BF25-CAD5-49CC-9944-9D8B18A4DFB0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:skype:skype:5.1.0.104:*:*:*:*:*:*:*",
              "matchCriteriaId": "BE8AF25D-636D-4E3E-9560-7FA3887B5D8B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:skype:skype:5.1.0.112:*:*:*:*:*:*:*",
              "matchCriteriaId": "25ADBD4E-7F02-4B41-BAD9-57F487ABC6FF",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unspecified vulnerability in the client in Skype 5.x before 5.1.0.922 on Mac OS X allows remote authenticated users to execute arbitrary code or cause a denial of service (application crash) via a crafted message."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad no especificada en el cliente de Skype v5.x antes de v5.1.0.922 en Mac OS X permite a usuarios autenticados remotamente ejecutar c\u00f3digo de su elecci\u00f3n o causar una denegaci\u00f3n de servicio (solicitud de bloqueo) a trav\u00e9s de un mensaje manipulado."
    }
  ],
  "evaluatorComment": "Per: http://blogs.skype.com/security/2011/05/security_vulnerability_in_mac.html\r\n\r\n\u0027Please note, Skype\u0027s other clients, e.g. Windows and Linux, are not susceptible to this vulnerability.\u0027",
  "id": "CVE-2011-2074",
  "lastModified": "2026-06-16T23:30:38.707",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "SINGLE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 8.5,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:N/AC:M/Au:S/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 6.8,
        "impactScore": 10.0,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": true
      }
    ]
  },
  "published": "2011-05-10T18:55:02.590",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch"
      ],
      "url": "http://blogs.skype.com/security/2011/05/security_vulnerability_in_mac.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://isc.sans.edu/diary.html?storyid=10837"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/44522"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.purehacking.com/blogs/gordon-maddern/skype-0day-vulnerabilitiy-discovered-by-pure-hacking"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/47747"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.theregister.co.uk/2011/05/06/skype_for_mac_critical_vulnerability/"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2011/1192"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://blogs.skype.com/security/2011/05/security_vulnerability_in_mac.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://isc.sans.edu/diary.html?storyid=10837"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/44522"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.purehacking.com/blogs/gordon-maddern/skype-0day-vulnerabilitiy-discovered-by-pure-hacking"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/47747"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.theregister.co.uk/2011/05/06/skype_for_mac_critical_vulnerability/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2011/1192"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.