Skype's Mac client has a serious zero-day vulnerability that the company is yet to fix, a security researcher has said.
Writing on the blog of security firm Pure Hacking, researcher Gordon Maddern said on Friday that the vulnerability means "an attacker needs only to send a victim a message [through Skype] and they can gain remote control of the victim's Mac". He added that the exploit was "extremely wormable and dangerous".
According to Maddern, he notified the VoIP company about the vulnerability more than a month ago, only to get a standard response reading: "Thank you for showing an interest in Skype security. We are aware of this issue and will be addressing it in the next hotfix". A fix has still not been released in the intervening period, he said.
"Pure Hacking won't give specifics on how to perform this attack until a patch from Skype is released," Maddern wrote. "However, we will give a full disclosure after Skype takes action or a reasonable responsible disclosure time."
According to Maddern, Skype's Windows and Linux clients are not vulnerable to the attack.
UPDATE (5:13pm): Skype has just sent ZDNet UK a statement promising a fix next week. The statement reads: "We are aware of this and will release a fix early next week to resolve the issue. We take our users privacy very seriously and are working quickly to protect Skype users from this vulnerability."
Writing on the blog of security firm Pure Hacking, researcher Gordon Maddern said on Friday that the vulnerability means "an attacker needs only to send a victim a message [through Skype] and they can gain remote control of the victim's Mac". He added that the exploit was "extremely wormable and dangerous".
According to Maddern, he notified the VoIP company about the vulnerability more than a month ago, only to get a standard response reading: "Thank you for showing an interest in Skype security. We are aware of this issue and will be addressing it in the next hotfix". A fix has still not been released in the intervening period, he said.
"Pure Hacking won't give specifics on how to perform this attack until a patch from Skype is released," Maddern wrote. "However, we will give a full disclosure after Skype takes action or a reasonable responsible disclosure time."
According to Maddern, Skype's Windows and Linux clients are not vulnerable to the attack.
UPDATE (5:13pm): Skype has just sent ZDNet UK a statement promising a fix next week. The statement reads: "We are aware of this and will release a fix early next week to resolve the issue. We take our users privacy very seriously and are working quickly to protect Skype users from this vulnerability."
LINK TO OUR HOME PAGE :
Voice Of GREYHAT is a non-profit Organization propagating news specifically related with Cyber security threats, Hacking threads and issues from all over the spectrum. The news provided by us on this site is gathered from various Re-Sources. if any person have some FAQ's in their mind they can Contact Us. Also you can read our Privacy Policy for more info.
Thank You !
-Team VOGH
If you enjoyed VOGH News, Articles Then Do Make sure you to Subscribe Our RSS feed. Stay Tuned with VOGH and get Updated about Cyber Security News, Hacking Threads and Lots More. All our Articles and Updates will directly be sent to Your Inbox. Thank You!
-Team VOGH
Categories:
vulnerablity
