Skype has pulled its video chat feature in its software because it could be misused to launch a self-copying worm attack against Skype users, media reported Wednesday.
Users who attempted to click on the "videos" button within a chat window were greeted with a message that the feature was unavailable "because of some security concerns."
"Our brightest engineers are rattling their wrenches to make things all right and bring the beloved videos back. Soon," the message read. "Sorry about this."
The flaw was first reported last Thursday by security researcher Aviv Raff who said the flaw was critical on this Tuesday.
It can "be triggered by simply visiting a Web site, or clicking on a link from your instant messaging application, which basically means that this vulnerability is now wormable," Raff said.
Attackers could not only exploit the bug to run unauthorized software on one victim's computer but also spread the infection to all of the Skype contacts in the victim's computer, because of the cross-site scripting flaw of Metacafe.com -- one of the two websites that host Skype's video feature.