Shulou(Shulou.com)11/24 Report--

CTOnews.com, August 29 (Xinhua)-- there is a serious vulnerability in Microsoft's Skype mobile app that could allow hackers to detect a user's IP address by sending a link, 404Media.co reported.

Image source Pexels this vulnerability only needs to use the text message function of Skype to send a link, which can expose the user's IP address without requiring the user to click on the link.

The vulnerability was originally discovered by an independent security researcher under the pseudonym "Yossi", and the article describes the process of exploiting it:

First, Yossi sent me a link to google.com via a Skype text chat. This link is a real Google site, not a fake. Then I opened Skype on iPad and checked the chat messages. I didn't even click on the link, but soon after, Yossi sent my IP address to the chat, and it was correct.

The article added that this issue only affects Skype's mobile applications, not the desktop version of Skype. For security reasons, the article did not disclose details of how the hackers exploited the vulnerability, but the article said the vulnerability was "very easy to exploit and only involved changing a parameter related to the link."

Yossi sent the vulnerability information he discovered to Microsoft, and Microsoft's initial response to Yossi was that the IP address in Skype "did not meet the definition of a security vulnerability that needed to be fixed immediately." However, when 404media.com asked Microsoft for comment, Microsoft said that although this issue in Skype is not an urgent security issue based solely on IP address disclosure, "we will address it in future product updates as an in-depth defense improvement to help protect customers." As of CTOnews.com 's writing, Microsoft has not fixed this problem.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.