Skype bug could allow malicious attacker ‘system’ level access, Microsoft says fix is ‘too …

移动互联 2018-02-14

A nasty Skype bug could allow a malicious attacker to gain “system” level access, if exploited. The bug is applicable on both macOS and Windows desktop platforms.

However, Microsoft says that fixing the bug will take “too much work”, stating that it would require a full rewrite of the application to fix the bug, ZDNet reports .

But Microsoft, which owns the voice- and video-calling service, said it won’t immediately fix the flaw, because the bug would require too much work.

Security researcher Stefan Kanthak says that the Skype updater can be maliciously modified to trick an application into drawing the wrong DLL library on Windows by creating and renaming a DLL to one Skype would access, then replace it with the original file.

Even though DLL’s don’t exist on macOS, Kanthak says that it’s still possible on macOS or Linux. Once system access is granted, it “can do anything” he says.

Microsoft says instead of issuing a security update, Skype will undergo a major revision later in which the bug will get fixed. This was after the company told Kanthak that its engineers were able to reproduce the bug.

Skype for macOS recently underwent a major interface update back in October. We’re unsure when the next major update of Skype will arrive, but you’ll probably want to be more careful when running Skype until then.

Check out 9to5Mac on YouTube for more Apple news:

9to5Mac

责编内容by:9to5Mac (源链)。感谢您的支持!

您可能感兴趣的

Bye-bye hamburger: New Skype update for Windows 10... Microsoft has recently launched the next generation of Skype , featuring a fresh design and more social features, on both Android and iPhone. A n...
20 周年纪念,微软推出了 4K 重置版《帝国时代:最终版》... 20 世纪最后的 10 年被认为是电子游戏发展的黄金期。在这段时间里,PC 游戏这个行业也是在这个时段内根基渐稳,进入了高速发展期。 如果你是 80 后、90 后的 PC 玩家,应该对这个时期诞生的《红色警戒》、《仙剑奇侠传》、《魔兽争霸2》、《古墓丽影2》、《盟军敢死队》等游戏历历在目。...
Microsoft Azure 1st Hyperscale Cloud Computing Pla... We’re excited and proud to announce that Microsoft Azure is the first hyper-scale cloud computing platform to be able to service UK law enforcement IT...
Skype launches Photo Effects – sticker suggestions... Not content with merelylaunching its own take on Instagram and Snapchat’s Stories, Skype today is adding another copycat-like feature to its app: ...
Microsoft announces Skype users can now send money... PayPal and Skype have teamed up to allow users to send money to other Skype users with PayPal via their mobile app (Android and iOS). The Send Mon...