CVE-2005-2300: Skype Technologies Skype

Low severity, CVSS 2.1. EPSS: 0.5% chance of exploitation in the next 30 days.

Skype 1.1.0.20 and earlier allows local users to overwrite arbitrary files via a symlink attack on the skype_profile.jpg temporary file.

Affected products

• Skype Technologies Skype: up to and including 1.1.0.20

Published 2005-07-19. Last modified 2026-06-16.