Skype Security Flaw

Thursday, May 25, 2006

A security whole in the Skype software has been revealed by a security researcher in New Zealand. Skype is now advising users to upgrade to the most recent version of Skype which does not contain the security flaw.

The Skype security flaw affects PCs running on windows for version 2.0.x.104, and the beta version 2.5.x.0 up to and including 2.5.x.78. To find out which version of Skype you use open up Skype, go to help > about and the version number will be listed. Skype has recommended you upgrade to Skype 2.0.x.1.05 or if you are using the Skype 2.5 beta to upgrade to Skype 2.5.x.79. Here are the full details on the Skype security flaw.

The flaw basically allows a hacker to download a file from an affected PC without the user's knowledge. Skype has rated the security flaw as a "medium risk". For the attack to work the hacker must trick the targeted Skype user to visit a malicious web page setup by the hacker and have the Skype user added to his contact list. He must also know the location of the file he is wishing to transfer.

This is the first security warning from Skype in seven months.