PT-2005-4713 · Microsoft+1 · Internet Explorer+1

Paul Laudanski · Published 2005-12-03 · Updated 2018-10-19 · CVE-2005-3975

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Drupal versions 4.5.0 through 4.5.5 Drupal versions 4.6.0 through 4.6.3

Description The issue is related to an interpretation conflict in the file.inc file, allowing remote authenticated users to inject arbitrary web script or HTML via HTML in a file with a GIF or JPEG file extension. This causes the HTML to be executed by a victim who views the file in Internet Explorer.

Recommendations For versions 4.5.0 through 4.5.5, update to a version outside of this range to mitigate the risk. For versions 4.6.0 through 4.6.3, update to a version outside of this range to mitigate the risk. As a temporary workaround, consider restricting access to files with GIF or JPEG extensions to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2005-3975

DSA-958-1

Affected Products

Drupal

Internet Explorer

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2005-3975 · Security Note
• http://drupal.org/files/sa-2005-008/advisory.txt · Vendor Advisory
• http://securityfocus.com/bid/15663 · Patch
• http://debian.org/security/2006/dsa-958 · Vendor Advisory
• http://secunia.com/advisories/17824 · Vendor Advisory
• http://securityfocus.com/archive/1/418291/100/0/threaded · Note
• http://vupen.com/english/advisories/2005/2684 · Note
• http://drupal.org/files/sa-2005-008/4.6.3.patch · Note
• http://securityreason.com/securityalert/220 · Note
• http://secunia.com/advisories/18630 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3975 · Note