NVD

Id
56554  
Name
CVE-2007-4429  
Description
Unspecified vulnerability in Skype allows remote attackers to cause a denial of service (server hang) via unknown vectors related to sending long URIs, as claimed to be actively exploited on 20070817 using a "call to a specific number." NOTE: this identifier is for the en.securitylab.ru disclosure. According to the vendor, this issue is separate from the "sign-on issues" that reduced Skype service on 20070817, which appears to be a site-specific problem. As of 20070821, it is not clear whether this issue is simply a symptom of the larger sign-on problem.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2007-08-20  
Modified Date
2008-09-05  
Seq
2007-4429  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
288146 56554 CVE-2007-4429 http://blogs.csoonline.com/the_skype_mystery_why_blame_the_august_windows_updates  View
288147 56554 CVE-2007-4429 http://en.securitylab.ru/poc/301420.php  View
288148 56554 CVE-2007-4429 http://en.securitylab.ru/poc/extra/301419.php  View
288149 56554 CVE-2007-4429 http://heartbeat.skype.com/2007/08/what_happened_on_august_16.html  View
288150 56554 CVE-2007-4429 http://heartbeat.skype.com/2007/08/where_we_are_at_1100_gmt.html  View
288151 56554 CVE-2007-4429 3032  View
288152 56554 CVE-2007-4429 20070817 Skype Network Remote DoS Exploit  View
288153 56554 CVE-2007-4429 20070820 Re: Skype Network Remote DoS Exploit  View
288154 56554 CVE-2007-4429 20070820 RE: Skype Network Remote DoS Exploit  View
288155 56554 CVE-2007-4429 20070820 Re[2]: Skype Network Remote DoS Exploit  View
288156 56554 CVE-2007-4429 http://www.securitylab.ru/news/301422.php  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57298 JVNDB-2007-005990 Skype におけるサービス運用妨害 (DoS) の脆弱性 Skype は、過度に長い URI を送信する不備があるため、2007年8月17日に "指定番号に電話する" を使用して攻撃されたとおり、サービス運用妨害 (サーバハング) 状態となる脆弱性が存在します。 CVE-2007-4429 27784 CVE-2007-4429 56554 5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005990.html 2007-08-20 2012-12-20 View