PT-1999-1596 · Third Voice · Third Voice

Published 1999-12-31 · Updated 2008-09-05 · CVE-1999-1167

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Third Voice (affected versions not specified)

Description A cross-site scripting issue in the Third Voice Web annotation utility allows remote users to inject malicious Javascript into an annotation, potentially enabling them to read sensitive data and generate fake web pages for other Third Voice users.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-1999-1167

Affected Products

Third Voice

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-1999-1167 · Security Note
• http://iss.net/security_center/static/7252.php · Note
• http://wired.com/news/technology/0%2C1282%2C20636%2C00.html · Note
• http://wired.com/news/technology/0%2C1282%2C20677%2C00.html · Note