A security expert has discovered a vulnerability in the popular instance messaging app Skype that could allow attackers to remotely execute code.
The flaw was found by Benjamin Kunz Mejri, a security researcher at Vulnerability Lab, during a team conference call in Skype, according to a report in Vulnerability Magazine. The critical bug currently impacts versions 7.2, 7.35, and 7.36, and has received a CVSS score of 7.2.
“The security vulnerability is located in the ‘clipboard format’ function of the Skype software,” according to the report. “Attackers are able to use a remote computer system with shared clipboard to the cache to provoke a stack buffer overflow on transmit to Skype.”
By leveraging the flaw, attackers would be able to crash the software with one request, which would result in the ability to remotely execute code “on the affected and connected computer systems via Skype.”
