Sign in / up

back to article Skype squishes cross-zone scripting bug

Skype has fixed a cross-zone scripting weakness in its voice over IP client software which spawned a couple of security bugs over recent weeks. Problems have arisen for Windows users because Skype uses Internet Explorer web controls to render internal and external HTML pages. Skype is running these web controls in Local Zone …

COMMENTS

House rules Send corrections
This topic is closed for new posts.
  1. Anonymous Coward
    Unhappy

    Updates

    Why can't skype just patch the flawed code, rather than forcing people to download all 22Mb again?

    0 0
  2. Anonymous Coward
    Anonymous Coward

    @Updates

    'cos they're trying to beat the size of Apple's QT updates?

    0 0
  3. Adrian Jones

    Patching?

    Well, looking in Skype\Phone\ on Windows, there's a 20.8Mb Skype.exe.

    So the question should be "Why don't Skype break up a 20.8Mb executable into individual components so that they *can* just patch the flawed code?"

    0 0
  4. Steve Evans

    @Matthew...

    I was just thinking the same thing whilst watching it crawl in at 66KB/s *yawn*

    0 0
  5. Anonymous Coward
    Anonymous Coward

    with a 22MB update...

    more like "Skype sledge-hammers cross-zone scripting bug"

    0 0
This topic is closed for new posts.