Lucene search
HistoryMay 02, 2005 - 4:00 a.m.
CVE-2005-1186
musicmatch jukebox
cve-2005-1186
internet explorer
trusted sites
cross-site scripting
xss
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
6 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
61.1%
Musicmatch Jukebox 10.00.2047 and earlier adds the musicmatch.com domain to the Trusted Sites zone in Internet Explorer, which allows systems in the domain to conduct unauthorized activities, as demonstrated using cross-site scripting (XSS) attacks.
Affected configurations
Node
musicmatchjukeboxRange≤10.00.2047
| CPE | Name | Operator | Version |
|---|---|---|---|
| musicmatch:jukebox | musicmatch jukebox | le | 10.00.2047 |
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
6 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
61.1%
Related for CVE-2005-1186