It's possible to construct URL in the file file will be transferred from Skype user's computer to another skype user without any confirmation.
vulners.com/securityvulns/securityvulns:doc:12729
vulners.com/securityvulns/securityvulns:doc:12753