NVD

Id
557  
Name
CVE-2008-0582  
Description
Cross-zone scripting vulnerability in the Internet Explorer web control in Skype 3.1 through 3.6.0.244 on Windows allows remote attackers to inject arbitrary web script or HTML in the Local Machine Zone via the Full Name field of a reviewer of a business item entry, accessible through (1) the SkypeFind dialog and (2) a skype:?skypefind URI for the skype: URI handler.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-03  
Published
2008-02-04  
Modified Date
2008-09-05  
Seq
2008-0582  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
3614 557 CVE-2008-0582 http://aviv.raffon.net/2008/01/31/AttackersCanSkypeFindYou.aspx  View
3615 557 CVE-2008-0582 VU#794236  View
3616 557 CVE-2008-0582 20080131 Attackers can SkypeFind you  View
3617 557 CVE-2008-0582 27338  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
50126 JVNDB-2008-005436 Windows 上で稼動する Skype の Internet Explorer Web コントロールにおけるクロスゾーンスクリプティングの脆弱性 Windows 上で稼動する Skype の Internet Explorer Web コントロールには、クロスゾーンスクリプティングの脆弱性が存在します。 CVE-2008-0582 30695 CVE-2008-0582 557 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005436.html 2008-02-04 2012-12-20 View