← Vulnerability feed

Vulnerability record · CVE-2007-4429 · published 20 August 2007

CVE-2007-4429: Skype technologies skype vulnerability

Skype Technologies · Skype

Unspecified vulnerability in Skype allows remote attackers to cause a denial of service (server hang) via unknown vectors related to sending long URIs, as claimed to be actively exploited on 20070817 using a "call to a specific number." NOTE: this identifier is for the en.securitylab.ru disclosure. According to the vendor, this issue is separate from the "sign-on issues" that reduced Skype service on 20070817, which appears to be a site-specific problem. As of 20070821, it is not clear whether this issue is simply a symptom of the larger sign-on problem.

5.0 CVSS 2.0 Medium EPSS 2.2% · top 18.2%
5.0CVSS 2.0 base score
2.2%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
22References, 2 tagged exploit
16 Jun 2026Last modified by NVD

Description

Unspecified vulnerability in Skype allows remote attackers to cause a denial of service (server hang) via unknown vectors related to sending long URIs, as claimed to be actively exploited on 20070817 using a "call to a specific number." NOTE: this identifier is for the en.securitylab.ru disclosure. According to the vendor, this issue is separate from the "sign-on issues" that reduced Skype service on 20070817, which appears to be a site-specific problem. As of 20070821, it is not clear whether this issue is simply a symptom of the larger sign-on problem.

AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://blogs.csoonline.com/the_skype_mystery_why_blame_the_august_windows_updates
http://en.securitylab.ru/poc/301420.php Exploit
http://en.securitylab.ru/poc/extra/301419.php
http://heartbeat.skype.com/2007/08/what_happened_on_august_16.html
http://heartbeat.skype.com/2007/08/where_we_are_at_1100_gmt.html
http://securityreason.com/securityalert/3032
http://www.securityfocus.com/archive/1/476942/100/0/threaded
http://www.securityfocus.com/archive/1/477156/100/0/threaded
http://www.securityfocus.com/archive/1/477178/100/0/threaded
http://www.securityfocus.com/archive/1/477240/100/0/threaded
http://www.securitylab.ru/news/301422.php
http://blogs.csoonline.com/the_skype_mystery_why_blame_the_august_windows_updates
http://en.securitylab.ru/poc/301420.php Exploit
http://en.securitylab.ru/poc/extra/301419.php
http://heartbeat.skype.com/2007/08/what_happened_on_august_16.html
http://heartbeat.skype.com/2007/08/where_we_are_at_1100_gmt.html
http://securityreason.com/securityalert/3032
http://www.securityfocus.com/archive/1/476942/100/0/threaded
http://www.securityfocus.com/archive/1/477156/100/0/threaded
http://www.securityfocus.com/archive/1/477178/100/0/threaded
http://www.securityfocus.com/archive/1/477240/100/0/threaded
http://www.securitylab.ru/news/301422.php

Track CVE-2007-4429 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2005-3267Skype technologies skype vulnerabilityInteger overflow in Skype client before 1.4.x.84 on Windows, before 1.3.x.17 on Mac OS, before 1.2.x.18 on Linux, and 1.1.x.6 and earlier allows remo…EPSS 7.3%9.3CVE-2008-1805Skype technologies skype improper input validation vulnerabilityIncomplete blacklist vulnerability in Skype 3.6.0.248, and other versions before 3.8.0.139, allows user-assisted remote attackers to bypass warning d…EPSS 3.9%9.3CVE-2008-2545Skype technologies skype improper input validation vulnerabilitySkype 3.6.0.248, and other versions before 3.8.0.139, uses a case-sensitive comparison when checking for dangerous extensions, which allows user-assi…EPSS 4.2%9.3CVE-2008-0454Microsoft internet explorer cross-site scripting vulnerabilityCross-zone scripting vulnerability in the Internet Explorer web control in Skype 3.6.0.244, and earlier 3.5.x and 3.6.x versions, on Windows allows u…EPSS 25%9.3CVE-2005-3265Skype technologies skype memory buffer overflow vulnerabilityBuffer overflow in Skype for Windows 1.1.x.0 through 1.4.x.83 allows remote attackers to execute arbitrary code via (1) callto:// and (2) skype:// li…EPSS 5.9%9.3CVE-2004-1114Skype technologies skype memory buffer overflow vulnerabilityBuffer overflow in the handling of command line arguments in Skype 1.0.x.94 through 1.0.x.98 allows remote attackers to execute arbitrary code via a …EPSS 5.7%7.5CVE-2006-5084Skype technologies skype improper input validation vulnerabilityFormat string vulnerability in the NSRunAlertPanel function in eBay Skype for Mac 1.5.*.79 and earlier allows remote attackers to cause a denial of s…EPSS 16%6.8CVE-2007-5989Skype technologies skype memory buffer overflow vulnerabilityUnspecified vulnerability in the skype4com URI handler in Skype before 3.6 GOLD allows remote attackers to execute arbitrary code via "short string v…EPSS 4.4%

Source: NIST National Vulnerability Database (record CVE-2007-4429), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.