Skype contains a flaw that may allow a remote denial of service. The issue is triggered when malformed data is handled through multiple chat fields, and will result in loss of availability for the program. Due to the poorly written advisory and horrible video, it is not exactly clear which fields are vulnerable or what conditions are required to exploit this.

Upgrade to version 5.8.0.158 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

• Generic Informational URL: http://attrition.org/security/rants/vulnerability-lab/
• Packet Storm: http://packetstormsecurity.org/files/111301/Skype-5.8x-5.5x-Corruption.html
• Other Advisory URL: http://vulnerability-lab.com/get_content.php?id=457
  http://www.vulnerability-lab.com/get_content.php?id=455
• Generic Exploit URL: http://www.youtube.com/watch?v=zQWgD-YzN-4

• Benjamin Kunz Mejri - Vulnerability Research Laboratory
• Alexander Fuchs - Vulnerability Laboratory
• Ucha Gobejishvili - Vulnerability Laboratory

NVD does not currently have a CVSSv2 score assigned.