Secunia

A vulnerability has been reported in Skype, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an error in the handling of "file:" URIs, which can be exploited to bypass the security warning for blacklisted file extensions e.g. via a "file:" URI containing upper case characters in the file extension.

Successful exploitation allows execution of arbitrary code, but requires that a user is tricked into clicking on a specially crafted "file:" URI.

The vulnerability is reported in version 3.8.*.115 and prior.

Solution
Update to version 3.8.0.139.
Further details available in Customer Area

Provided and/or discovered by
Ismael Briones, reported via iDefense

Changelog
Further details available in Customer Area

Original Advisory
Skype:
http://www.skype.com/security/skype-sb-2008-003.html

iDefense:
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=711

Deep Links
Links available in Customer Area