Security hole plugged in Skype for Mac

Skype on Tuesday issued an update that fixes a serious security flaw in its Internet telephony software for Apple Computer's Mac OS X.

A vulnerability exists in the way Skype for Mac handles Web links, according to a Skype advisory. An attacker could construct a malformed Skype link which, when clicked on, can cause the application to crash or allow a system to be compromised.

"A user of Skype for Mac who follows a specially crafted URL may experience a crash of the Skype software and possibly may execute arbitrary code without consent," the company said in its advisory. The Net telephony provider, part of online auction giant eBay, deems the issue "high" risk.

A miscreant could publish a malformed Skype link on a Web site, for example, and try to trick someone into following it, the company said.

The vulnerability exists in Skype for Mac releases prior to and including 1.5.*.79. It has been fixed in release 1.5.*.80 or later, which was available for download on the Skype Web site on Tuesday.

[Seaspray0]

Please Clarify

This is an application that is causing the issue?

[KTLA_knew]

No need to clarify

It's already stated multiple times throughout the article as well as the headline. The application is called "Skype", and it's a sign of growing popularity that it begins to get examined for security holes.

Any and all complex network applications (as well as operating systems) have plenty of security vulnerabilities in them, however it's just not worth anyone's time to go looking for any if the user base isn't large enough to yield enough successful hits.