PT-1999-1596 · Third Voice · Third Voice

Publicado 1999-12-31 · Atualizado 2008-09-05 · CVE-1999-1167

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Third Voice (affected versions not specified)

Description A cross-site scripting issue in the Third Voice Web annotation utility allows remote users to inject malicious Javascript into an annotation, potentially enabling them to read sensitive data and generate fake web pages for other Third Voice users.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-1999-1167

Produtos afetados

Third Voice

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-1999-1167 · Nota de Segurança
• http://iss.net/security_center/static/7252.php · Nota
• http://wired.com/news/technology/0%2C1282%2C20636%2C00.html · Nota
• http://wired.com/news/technology/0%2C1282%2C20677%2C00.html · Nota