The host is installed with Skype 3.5.x, 3.6.0.244 or earlier 3.6.x versions on Windows and is prone to cross-zone scripting vulnerability. A flaw is present in the application, which fails to handle the Local Machine Zone via the Title field in the Skype video gallery. Successful exploitation could allow user-assisted remote attackers to inject arbitrary web script or HTML in the Local Machine Zon ...