<http://schema.org/articleBody>
"Aviv Raf, a security expert, has discovered a flaw that exists in Skype v3.6.0.244 - and which may be present in older iterations, too.\nUsing the built-in video search feaure in Skype (which trawls DailyMotion's servers), a hacker can take advantage of a \"cross-zone scripting error\" that causes a script to run within a PC's Internet Explorer install ation as opposed to on the remote server.  All a hacker would have to do is attach the script to a video, upload it to include a popular keyword in the video's tags, and when the user ran the video, the script would execute on the user's machine.  A video proof-of-concept can be found below that shows a script causing the computers calculator to launch.\nThus far no notable exploits to this effect have been performed. The best temporary defense for Skype users at the moment is to not use the included search feature until the bug is eliminated.\n[via Ars Technica]\n\n\n\n\n\n"^^<http://www.w3.org/2001/XMLSchema#string>
<http://mashable.com/2008/01/20/researcher-discovers-vulnerability-in-skype/>