CVE-2005-3265: Skype Technologies Skype

High severity, CVSS 9.3. EPSS: 5.9% chance of exploitation in the next 30 days.

Buffer overflow in Skype for Windows 1.1.x.0 through 1.4.x.83 allows remote attackers to execute arbitrary code via (1) callto:// and (2) skype:// links, or (3) a non-standard VCARD, possibly due to an underlying error in the SysUtils.WideFmtStr Delphi routine.

Affected products

• Skype Technologies Skype: version 1.1.0.61 only; version 1.1.0.73 only; version 1.1.0.79 only; version 1.2.0.0 only; version 1.2.0.37 only; version 1.2.0.41 only; …

Published 2005-10-27. Last modified 2026-06-16.