PT-2005-2205 · Moonware · Webcamxp Pro

Published 2005-04-19 · Updated 2017-07-11 · CVE-2005-1189

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions WebcamXP PRO versions 2.16.468 and earlier

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the chat name, potentially redirecting users to other sites using an IFRAME.

Recommendations For versions 2.16.468 and earlier, update to a version later than 2.16.468 to resolve the issue. As a temporary workaround, consider restricting user input for the chat name field to prevent malicious script injection.

Fix

Related Identifiers

CVE-2005-1189

Affected Products

Webcamxp Pro

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2005-1189 · Security Note
• http://securitytracker.com/id?1013753 · Note
• http://secunia.com/advisories/14999 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20166 · Note