CVE-2004-1114: Skype Technologies Skype

High severity, CVSS 9.3. EPSS: 5.7% chance of exploitation in the next 30 days.

Buffer overflow in the handling of command line arguments in Skype 1.0.x.94 through 1.0.x.98 allows remote attackers to execute arbitrary code via a callto:// URL with a long non-existent username, a different vulnerability than CVE-2004-1777.

Affected products

• Skype Technologies Skype: version 1.0.0.9 only; version 1.0.0.10 only; version 1.0.0.18 only; version 1.0.0.29 only; version 1.0.0.94 only; version 1.0.0.97 only

Published 2005-01-10. Last modified 2026-06-16.