CVE-2008-0583 - CVE House
Back to Database
Status published Medium CVE-2008-0583

Cross-zone scripting vulnerability in the Internet Explorer web control in...

Vulnerability Description

Cross-zone scripting vulnerability in the Internet Explorer web control in Skype 3.6.0.244, and earlier 3.5.x and 3.6.x versions, on Windows allows user-assisted remote attackers to inject arbitrary web script or HTML in the Local Machine Zone via the Description and unspecified other metadata fields of a Metacafe movie submitted by Metacafe Pro to the Skype video gallery, accessible through a search within the (1) "Add video to chat" or (2) "Add video to mood" dialog, a different vector than CVE-2008-0454.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-0583

Credits & Attribution

No credits recorded in the NVD database.

References

More from skype technologies

View All →
CVE-2008-2545
Skype 3.6.0.248, and other versions before 3.8.0.139, uses a case-sensitive...
Critical 9.3
CVE-2008-1805
Incomplete blacklist vulnerability in Skype 3.6.0.248, and other versions before...
Critical 9.3
CVE-2008-0582
Cross-zone scripting vulnerability in the Internet Explorer web control in...
Medium 4.3
CVE-2007-5989
Unspecified vulnerability in the skype4com URI handler in Skype before...
Medium 6.8
CVE-2007-4429
Unspecified vulnerability in Skype allows remote attackers to cause a...
Medium 5

Affected Vendor

skype technologies

View all reports →

Affected Software

skype
Vulnerable Versions:
3.5, 3.6, 3.6.216, 3.6.244

Timeline

Official Publish: February 5th, 2008
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.