PT-2005-4273 · Microsoft+1 · Internet Explorer+1

K-Gen · Published 2005-11-03 · Updated 2008-09-05 · CVE-2005-3477

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Invision Gallery version 2.0.3

Description The issue arises from a multiple interpretation error in the image upload handling code, allowing remote attackers to conduct cross-site scripting (XSS) attacks. This occurs when an image with a mismatch between its type and extension is uploaded, and then rendered by Internet Explorer, potentially due to its handling of such files.

Recommendations For Invision Gallery version 2.0.3, consider validating image types to ensure they match their extensions before upload to prevent potential cross-site scripting attacks. As a temporary workaround, restrict the upload of images with mismatched types and extensions until a proper fix is implemented.

Fix

Related Identifiers

CVE-2005-3477

Affected Products

Internet Explorer

Invision Gallery

References · 5

• http://secunia.com/advisories/17393 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-3477 · Security Note
• http://securityreason.com/securityalert/105 · Note
• http://securityfocus.com/bid/15286 · Note
• http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0519.html · Note