The popular VOIP client Skype has been beaten?! As everyone knows Skype takes security very seriously according to their own words: “The security of your information is of the utmost concern to us here at Skype and something we take very seriously” So we rose up to the challenge and tried to see if we could beat the system filters and/or software out of the box. This presentation will offer the first in depth view & analysis of the bugs that where found in Skype by the vulnerability-lab.com research team in 2011. The presentation will also provide exclusive attack schemes from an attackers point of view which were also used for verification of our findings. Buglist: – Skype 5.3.x 2.2.x 5.2.x – Persistent Cross Site Scripting Vulnerability – Skype 5.3.x 2.2.x 5.2.x – Persistent Software Vulnerability – Skype v5.3.x – Transfer Standby Buffer Overflow Vulnerability – Skype v5.2.x and v5.3.x – Critical Pointer Vulnerability – Skype v5.3.x v2.2.x v5.2.x – Denial of Service Vulnerability Attack schemes: – Client Side Skype Exploitation (Local & Remote) – Server Side Exploitation #1 (Local & Remote) – Server Side Exploitation #2 (Local & Remote) – Denial of Service Exploitation (Local to Remote) – Buffer Overflow Exploitation (Remote) – Pointer Bug Exploitation (Local)