CVEs-PoC/2006/CVE-2006-5084.md

CVE-2006-5084

Description

Format string vulnerability in the NSRunAlertPanel function in eBay Skype for Mac 1.5.*.79 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a malformed Skype URL, as originally reported to involve a null dereference.

POC

Reference

• http://security-protocols.com/vids/skype_osx_0day.htm
• http://www.security-protocols.com/modules.php?name=News&file=article&sid=3259

Github

No PoCs found on GitHub currently.