Skype for iOS updates address XSS vulnerability

Skype has released updates to its popular VoIP app for Apple's iOS mobile operating system. While not officially documented in the list of changes, a spokesperson for the company confirmed to The H that version 3.5.84 of Skype for iOS addresses a previously reported vulnerability that could allow an attacker to gain access to a victim's contact list using a cross-site scripting (XSS) exploit.

The latest versions of the apps for iOS devices also include anti-shake technology to improve video chat (only the rear camera is currently supported). Other changes include the addition of built-in support for using Bluetooth headsets, and built-in advertising; Skype customers who have credit in their account will not see any ads.

More details about the updates can be found in a post on the Skype blog. Skype 3.5.84 is available to download for iPod Touch or iPhone and iPad from Apple's iTunes Store.

See also:

• Skype confirms XSS vulnerability in iPhone app, a report from The H.

(crve)