Unspecified vulnerability in the client in Skype 5.x before 5.1.0.922 on Mac OS X allows…
Priority MEDIUM 42Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Medium
- Impact type
- —
- Confidentiality · integrity · availability
- Complete · Complete · Complete
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA.
Summary
Unspecified vulnerability in the client in Skype 5.x before 5.1.0.922 on Mac OS X allows remote authenticated users to execute arbitrary code or cause a denial of service (application crash) via a crafted message.
Why it matters now
EPSS 0.02876 86th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 8
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:skype:skype:5.0.0.105:*:*:*:*:*:*:* | 5.0.0.105 | Vulnerable | Skype |
| cpe:2.3:a:skype:skype:5.0.0.105:beta:*:*:*:*:*:* | 5.0.0.105 beta | Vulnerable | Skype |
| cpe:2.3:a:skype:skype:5.0.0.123:beta:*:*:*:*:*:* | 5.0.0.123 beta | Vulnerable | Skype |
| cpe:2.3:a:skype:skype:5.0.0.152:*:*:*:*:*:*:* | 5.0.0.152 | Vulnerable | Skype |
| cpe:2.3:a:skype:skype:5.0.0.156:*:*:*:*:*:*:* | 5.0.0.156 | Vulnerable | Skype |
| cpe:2.3:a:skype:skype:5.1.0.104:*:*:*:*:*:*:* | 5.1.0.104 | Vulnerable | Skype |
| cpe:2.3:a:skype:skype:5.1.0.112:*:*:*:*:*:*:* | 5.1.0.112 | Vulnerable | Skype |
| cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* | all versions | Running on | Apple |
- cpe:2.3:a:skype:skype:5.0.0.105:*:*:*:*:*:*:* Versions 5.0.0.105 Vulnerable ·Skype
- cpe:2.3:a:skype:skype:5.0.0.105:beta:*:*:*:*:*:* Versions 5.0.0.105 beta Vulnerable ·Skype
- cpe:2.3:a:skype:skype:5.0.0.123:beta:*:*:*:*:*:* Versions 5.0.0.123 beta Vulnerable ·Skype
- cpe:2.3:a:skype:skype:5.0.0.152:*:*:*:*:*:*:* Versions 5.0.0.152 Vulnerable ·Skype
- cpe:2.3:a:skype:skype:5.0.0.156:*:*:*:*:*:*:* Versions 5.0.0.156 Vulnerable ·Skype
- cpe:2.3:a:skype:skype:5.1.0.104:*:*:*:*:*:*:* Versions 5.1.0.104 Vulnerable ·Skype
- cpe:2.3:a:skype:skype:5.1.0.112:*:*:*:*:*:*:* Versions 5.1.0.112 Vulnerable ·Skype
- cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* Versions all versions Running on ·Apple
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2011-2074
- 2026-10-03 Alias added: GHSA-fqv9-gc72-4c32
References
Advisory 1
More Skype vulnerabilities
- TI-2010-02997 Untrusted search path vulnerability in Skype 4.2.0.169 and earlier allows local users… CVSS 2.0HIGH 9.3
- TI-2009-04497 Unspecified vulnerability in the Extras Manager before 2.0.0.67 in Skype before 4.1.0.179… CVSS 2.0HIGH 10.0
- TI-2024-14171 Skype for Consumer Remote Code Execution Vulnerability CVSS 3.1HIGH 8.8
- TI-2004-01654 Skype 0.92.0.12 and 1.0.0.1 for Linux, and possibly other versions, creates the… CVSS 2.0MEDIUM 4.6
- TI-2006-02252 Argument injection vulnerability in the URI handler in Skype 2.0.*.104 and 2.5.*.0… CVSS 2.0LOW 2.6
Sources
- CVE-2011-2074 · CVE Program
- CVE-2011-2074 · NVD
- FIRST EPSS
- GHSA-fqv9-gc72-4c32 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences