What’s Vulnerable › Vulnerabilities

CVE-2011-1717

• Severity: low (CVSS 2.1 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2011-04-18 · updated 2026-06-16
• Weakness: CWE-264

Description

Skype for Android stores sensitive user data without encryption in sqlite3 databases that have weak permissions, which allows local applications to read user IDs, contacts, phone numbers, date of birth, instant message logs, and other private information.

Affected products

• Skype For Android: all versions

References

• http://blogs.skype.com/security/2011/04/privacy_vulnerability_in_skype.html
• http://www.androidpolice.com/2011/04/14/exclusive-vulnerability-in-skype-for-android-is-exposing-your-name-phone-number-chat-logs-and-a-lot-more/
• http://www.securitytracker.com/id?1025387
• http://www.theregister.co.uk/2011/04/15/skype_for_android_vulnerable/
• http://blogs.skype.com/security/2011/04/privacy_vulnerability_in_skype.html
• http://www.androidpolice.com/2011/04/14/exclusive-vulnerability-in-skype-for-android-is-exposing-your-name-phone-number-chat-logs-and-a-lot-more/
• http://www.securitytracker.com/id?1025387
• http://www.theregister.co.uk/2011/04/15/skype_for_android_vulnerable/

Get alerted when CVE-2011-1717 or the next vulnerability affects your stack