CVE-2005-3267

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Integer overflow in Skype client before 1.4.x.84 on Windows, before 1.3.x.17 on Mac OS, before 1.2.x.18 on Linux, and 1.1.x.6 and earlier allows remote attackers to cause a denial of service (crash) via crafted network data with a large Object Counter value, which leads to a resultant heap-based buffer overflow.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-189

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=bugtraq&m=113026202728568&w=2
http://secunia.com/advisories/17305/Patch, Vendor Advisory
http://securityreason.com/securityalert/115
http://skype.com/security/skype-sb-2005-03.htmlPatch, Vendor Advisory
http://www.kb.cert.org/vuls/id/905177US Government Resource
http://www.osvdb.org/20306
http://www.securityfocus.com/bid/15192Exploit, Patch
http://www.vupen.com/english/advisories/2005/2197Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/22850
http://marc.info/?l=bugtraq&m=113026202728568&w=2
http://secunia.com/advisories/17305/Patch, Vendor Advisory
http://securityreason.com/securityalert/115
http://skype.com/security/skype-sb-2005-03.htmlPatch, Vendor Advisory
http://www.kb.cert.org/vuls/id/905177US Government Resource
http://www.osvdb.org/20306
http://www.securityfocus.com/bid/15192Exploit, Patch
http://www.vupen.com/english/advisories/2005/2197Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/22850

Timeline

Published: Oct 27, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-32682.1yiff server (yiff-server) 2.14.2 on Debian GNU/Linux runs as root and does not properly verify ownership of files that it opens, which allow CVE-2005-32697.5Stack-based buffer overflow in help.cgi in the HTTP administrative interface for (1) Sun Java System Directory Server 5.2 2003Q4, 2004Q2, an CVE-2005-32707.2Untrusted search path vulnerability in DiskMountNotify for Symantec Norton AntiVirus 9.0.3 allows local users to gain privileges by modifyin CVE-2005-32712.1Exec in Linux kernel 2.6 does not properly clear posix-timers in multi-threaded environments, which results in a resource leak and could all CVE-2005-32725.0Linux kernel before 2.6.12 allows remote attackers to poison the bridge forwarding table using frames that have already been dropped by filt CVE-2005-32735.0The rose_rt_ioctl function in rose_route.c for Radionet Open Source Environment (ROSE) in Linux 2.6 kernels before 2.6.12, and 2.4 before 2.CVE-2005-32744.7Race condition in ip_vs_conn_flush in Linux 2.6 before 2.6.13 and 2.4 before 2.4.32-pre2, when running on SMP systems, allows local users to CVE-2005-32752.6The NAT code (1) ip_nat_proto_tcp.c and (2) ip_nat_proto_udp.c in Linux kernel 2.6 before 2.6.13 and 2.4 before 2.4.32-rc1 incorrectly decla CVE-2005-32762.1The sys_get_thread_area function in process.c in Linux 2.6 before 2.6.12.4 and 2.6.13 does not clear a data structure before copying it to u CVE-2005-327710.0The LPD service in HP-UX 10.20 11.11 (11i) and earlier allows remote attackers to execute arbitrary code via shell metacharacters ("`" or si CVE-2005-32787.2Integer overflow in the openpsfile function in gsinterf.c for Jan Kybic BitMap Viewer (BMV) 1.2 allows local users to execute arbitrary code CVE-2005-32797.2Stack-based buffer overflow in the vgasco_printf function in Jan Kybic BitMap Viewer (BMV) 1.2, when compiled with the M_UNIX flag and runni