PT-2013-5977 · Isl · Isl Desktop+1

Juan Francisco Bolivar · Publicado 2013-12-10 · Atualizado 2017-08-29 · CVE-2013-6237

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Baixa

Vetor base

AV:N/AC:M/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions ISL Desktop plugin for Windows versions prior to 1.4.7 for ISL Light 3.5.4 and earlier

Description The issue allows remote authenticated users to obtain sensitive information by pasting the clipboard contents that have been copied by another user in the session.

Recommendations For versions prior to 1.4.7, update to version 1.4.7 or later to resolve the issue.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2013-6237

Produtos afetados

Isl Desktop

Isl Light

Referências · 7

• 🔥 http://seclists.org/fulldisclosure/2013/Dec/14 · Exploit
• 🔥 http://packetstormsecurity.com/files/124274/ISL-Light-Desktop-3.5.4-Information-Disclosure.html · Exploit
• http://osvdb.org/100512 · Nota
• http://securityfocus.com/bid/64050 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/89399 · Nota
• http://islonline.com/help/isl-releases-info/any/manual/?2013-11-29-rel-info-isl-light-desktop-plugin-1-4-7-win.htm · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2013-6237 · Nota de Segurança