- Joined
- Jun 18, 2010
- Messages
- 4,891
- Reaction score
- 1,050
[ame=http://www.youtube.com/watch?v=Ou_Iir2SklI&feature=player_detailpage]XSS in Skype for iOS - YouTube[/ame]
Mashable reports today on a new security vulnerability that has just been found in Skypes iOS app. The bug, which is a cross-site scripting (XSS) problem, has been found in Skype 3.0.1 and earlier. According to Mashable, the security hole enables a hacker to use malicious JavaScript code that will run when the user looks at a text message in Skypes chat window. Apparently once it has gained a foothold in this way, the malicious code can then access any of the files on your iOS device that the Skype app has access to, which would include your address book. Skype has already acted swiftly to address the problem, issuing the following statement on the matter:
We are working hard to fix this reported issue in our next planned release, which we hope to roll out imminently.
Check out the video above to see exactly how the malicious code manages to interact with your iPhone or iPad. Scary!
Source: Skype Vulnerability Lets Hackers Steal User Data