VULNERABILITY INTELLIGENCE
CVE-2007-5989
CVSS score6.8 MEDIUM
EPSS probability4.42%
CISA KEVNot currently listed
Published2007-12-13
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P
Description
Unspecified vulnerability in the skype4com URI handler in Skype before 3.6 GOLD allows remote attackers to execute arbitrary code via "short string values" that result in heap corruption.
Weakness classification
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer