Categories: Breaking NewsHacking

Sending a message brings Skype into an endless crash loop

The eight-character string “http://:” brings Skype into Endless Crash Loop, and once they’re in the user’s chat history, the app can’t start again.

A few days ago we discussed about a problem occurred to iPhone and iPad users, their mobile devices were crashing after the reception of a specifically crafted text message, now a similar problem has been discovered by Skype users.

The popular video chat and messaging service is affected by a bug that crashes almost every version of Skype, on both desktop and mobile platform, with a single message composed of eight characters. The bug was first reported by the user Giperion, who noted that sending “http://:” would crash the Skype app endlessly for the sender of the message containing the specific text string, as well as the receiver.

This time the impact on end-user is more serious, in order to restore a normal situation, it is necessary to reinstall the client, the flaw is triggered by sending the following message:

‘http://:’ (without the quotes)

This means that just receiving a message containing the text string “http://:” during a normal conversation, it reportedly crashes Skype when running on Windows, Android, or iOS operating system. Deleting user’s chat history doesn’t solve the problem, because the Skype client re-downloads this data from the cloud every time you start the app.

The news of the crash is also reported in the Skype community, according the company Skype app for Mac and the recent version of Skype app for Windows 8.1 aren’t  affected by the bug. VentureBeat tested the existence of the bug on Skype for Android, Windows, and iOS and confirmed that the problem affects them.

“Skype for Android and iOS both fall into endless crash loops.” 

A spokesperson for Skype has confirmed the bug and reported that the experts of the company are “aware of the problem and are working to provide a resolution.”

The workaround for the annoying problem is to ask the sender of the message to delete it, and then to install an older version of Skype, which is not affected by the bug.
“A workaround for Windows users (found, again, on Skype’s community forums) suggests asking the person who sent you the message to delete it, and then installing an older version of Skype instead. Hopefully the company will be quicker than Apple when it comes to issuing a full fix for the bug.” states The Verge.

Let’s wait for a fix from Skype.

Pierluigi Paganini

Pierluigi Paganini is member of the ENISA (European Union Agency for Network and Information Security) Threat Landscape Stakeholder Group and Cyber G7 Group, he is also a Security Evangelist, Security Analyst and Freelance Writer. Editor-in-Chief at "Cyber Defense Magazine", Pierluigi is a cyber security expert with over 20 years experience in the field, he is Certified Ethical Hacker at EC Council in London. The passion for writing and a strong belief that security is founded on sharing and awareness led Pierluigi to find the security blog "Security Affairs" recently named a Top National Security Resource for US. Pierluigi is a member of the "The Hacker News" team and he is a writer for some major publications in the field such as Cyber War Zone, ICTTF, Infosec Island, Infosec Institute, The Hacker News Magazine and for many other Security magazines. Author of the Books "The Deep Dark Web" and “Digital Virtual Currency and Bitcoin”.

Recent Posts

U.S. CISA adds Microsoft Windows flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Microsoft Windows flaws to its Known Exploited…

2 hours ago

Ivanti fixed two EPMM flaws exploited in limited attacks

Ivanti addressed two Endpoint Manager Mobile (EPMM) software vulnerabilities that have been exploited in limited…

4 hours ago

Microsoft Patch Tuesday security updates for May 2025 fixed 5 actively exploited zero-days

Microsoft Patch Tuesday security updates for May 2025 addressed 75 security flaws across multiple products, including…

12 hours ago

Fortinet fixed actively exploited FortiVoice zero-day<gwmw style="display:none;"></gwmw><gwmw style="display:none;"></gwmw>

Fortinet fixed a critical remote code execution zero-day vulnerability actively exploited in attacks targeting FortiVoice…

14 hours ago

How Interlock Ransomware Affects the Defense Industrial Base Supply Chain

Interlock Ransomware 's attack on a defense contractor exposed global defense supply chain details, risking…

1 day ago

Marks and Spencer confirms data breach after April cyber attack

Marks and Spencer (M&S) confirms that threat actors stole customer data in the ransomware attack…

1 day ago