TECH

Security bug "forced" Microsoft to create a new version of Skype
The bug has been discovered by Stefan Kanthak, a security expert, and reported to Microsoft in September 2017 and has a bug in the Skype for Windows update installer.The crash allows the installer to be fooled with a "DLL hijacking", causing it to access a malicious DLL instead of a legitimate and secure file.Although the potential risk is serious, the vulnerability is not the most dangerous because it requires the hacker to have physical access to the computer to do so, however, Stefan Kanthak argues that an update of the application would not only be insufficient as it could exacerbate the situation.In addition, Microsoft acknowledged that a fix would require "a major code review", so the solution will go through a new version of the product, ZDNet said.Microsoft has yet to announce when the new version of Skype is scheduled.

Sapo