Full Disclosure mailing list archives

Re: Skype videomood XSS


From: "avivra" <avivra () gmail com>
Date: Tue, 22 Jan 2008 21:20:50 +0200

Hi,

 

Skype removed the videos feature, due to the fact that it is also possible
to inject scripts via Metacafe.

More information here:
http://aviv.raffon.net/2008/01/22/NoMoreVideosForYouComeBackWhenPatchAvailab
le.aspx 

 

--Aviv.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread: