CVE-2007-4429 json
Unspecified vulnerability in Skype allows remote attackers to cause a denial of service (server hang) via unknown vectors related to sendin…
published 2007-08-20 19 y ago modified 2026-06-16 4 mo ago also EUVD-2007-4412
- cvss
- 5.0
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 2.2%
- EPSS 2.2% chance of exploitation in 30 days, percentile 82%
- public exploits
- 0
- none known
Summary
Unspecified vulnerability in Skype allows remote attackers to cause a denial of service (server hang) via unknown vectors related to sending long URIs, as claimed to be actively exploited on 20070817 using a "call to a specific number." NOTE: this identifier is for the en.securitylab.ru disclosure. According to the vendor, this issue is separate from the "sign-on issues" that reduced Skype service on 20070817, which appears to be a site-specific problem. As of 20070821, it is not clear whether this issue is simply a symptom of the larger sign-on problem.
Exploit prediction
2.20% chance of exploitation in the next 30 days, higher than 82% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- en.securitylab.ru http://en.securitylab.ru/poc/301420.php referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 5.0 | AV:N/AC:L/Au:N/C:N/I:N/A:P |
References
-
en.securitylab.ru
/poc/301420.php
exploit
-
securityfocus.com
/archive/1/477156/100/0/threaded
mailing-list
-
securityfocus.com
/archive/1/477240/100/0/threaded
mailing-list
-
securityreason.com
/securityalert/3032
third-party-advisory
- en.securitylab.ru /poc/extra/301419.php
- heartbeat.skype.com /2007/08/what_happened_on_august_16.html
- blogs.csoonline.com /the_skype_mystery_why_blame_the_august_windows_updates
- securitylab.ru /news/301422.php
- heartbeat.skype.com /2007/08/where_we_are_at_1100_gmt.html
-
securityfocus.com
/archive/1/477178/100/0/threaded
mailing-list
-
securityfocus.com
/archive/1/476942/100/0/threaded
mailing-list
Sources
- CVE List CVE-2007-4429
- NVD CVE-2007-4429
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.