Microsoft Claims That It Fixed the Skype Updater Bug Last Year
Earlier this week we reported about a bug in Skype'southward native updater which potentially immune hackers to gain complete admission to a user's arrangement. The bug was discovered by German researcher Stefan Kanthak who claimed he had alerted Microsoft about it in September last year. Kanthak recently made his discovery public as he believed that Microsoft hadn't stock-still the bug.
According to Kanthak, the bug in Skype's proprietary update mechanism left it vulnerable to DLL highjacking which allowed hackers to load malicious DLLs to gain admission to the SYSTEM account.
Now, co-ordinate to a recent mail service on Microsoft'southward community forums, the visitor claims to have already patched the bug back in Oct last year. In the postal service, Skype's program manager Ellen Kilbourne writes:
"At Skype, we take security very seriously…In that location was an issue with an older version of the Skype for Windows desktop installer- version seven.40 and lower. The issue was in the plan that installs the Skype software- the consequence was not in the Skype software itself. Customers who have already installed this version of Skype for Windows desktop are non affected. We accept removed this older version of Skype for Windows desktop from out website skype.com…The installer for the current version of Skype for Windows desktop (v8) does Non have this issue, and it has been available since October, 2017."
Microsoft has recommended users to update to the latest version of Skype in order to continue using the service without the looming fearfulness of any security vulnerabilities.
Those running the latest version of Skype have already been protected by the vulnerability for the by few months and any malware exploiting the vulnerability hasn't been discovered all the same. If you even so oasis't updated to the latest version of Skype, you can caput on to the website and download it correct away.
Source: https://beebom.com/microsoft-fixed-skype-bug/
Posted by: groesbeckalmly1938.blogspot.com
0 Response to "Microsoft Claims That It Fixed the Skype Updater Bug Last Year"
Post a Comment