PT-2005-2205 · Moonware · Webcamxp Pro

Publicado 2005-04-19 · Atualizado 2017-07-11 · CVE-2005-1189

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions WebcamXP PRO versions 2.16.468 and earlier

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the chat name, potentially redirecting users to other sites using an IFRAME.

Recommendations For versions 2.16.468 and earlier, update to a version later than 2.16.468 to resolve the issue. As a temporary workaround, consider restricting user input for the chat name field to prevent malicious script injection.

Correção

Identificadores relacionados

CVE-2005-1189

Produtos afetados

Webcamxp Pro

Referências · 4

• http://securitytracker.com/id?1013753 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-1189 · Nota de Segurança
• http://secunia.com/advisories/14999 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20166 · Nota