Lucene search

K
cveMitreCVE-2008-6061
HistoryFeb 05, 2009 - 1:30 a.m.

CVE-2008-6061

2009-02-0501:30:00
CWE-79
mitre
web.nvd.nist.gov
23
cve-2008-6061
cross-site scripting
xss
flash
camtasia studio

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6.1

Confidence

High

EPSS

0.034

Percentile

91.6%

Cross-site scripting (XSS) vulnerability in ActionScript in arbitrary Shockwave Flash (SWF) controller files created by Techsmith Camtasia Studio before 5 allows remote attackers to inject arbitrary additional SWF content via a URL in the csPreloader parameter.

Affected configurations

Nvd
Node
techsmithcamtasia_studioRange4.0.2
OR
techsmithcamtasia_studioMatch1.0
OR
techsmithcamtasia_studioMatch1.0.1
OR
techsmithcamtasia_studioMatch1.1
OR
techsmithcamtasia_studioMatch1.1.1
OR
techsmithcamtasia_studioMatch2.0
OR
techsmithcamtasia_studioMatch2.0.1
OR
techsmithcamtasia_studioMatch2.0.2
OR
techsmithcamtasia_studioMatch2.0.3
OR
techsmithcamtasia_studioMatch2.0.4
OR
techsmithcamtasia_studioMatch2.0.5
OR
techsmithcamtasia_studioMatch2.1.0
OR
techsmithcamtasia_studioMatch2.1.1
OR
techsmithcamtasia_studioMatch2.1.2
OR
techsmithcamtasia_studioMatch3.0.0
OR
techsmithcamtasia_studioMatch3.0.1
OR
techsmithcamtasia_studioMatch3.0.2
OR
techsmithcamtasia_studioMatch3.1.0
OR
techsmithcamtasia_studioMatch3.1.1
OR
techsmithcamtasia_studioMatch3.1.2
OR
techsmithcamtasia_studioMatch4.0.0
OR
techsmithcamtasia_studioMatch4.0.1
VendorProductVersionCPE
techsmithcamtasia_studio*cpe:2.3:a:techsmith:camtasia_studio:*:*:*:*:*:*:*:*
techsmithcamtasia_studio1.0cpe:2.3:a:techsmith:camtasia_studio:1.0:*:*:*:*:*:*:*
techsmithcamtasia_studio1.0.1cpe:2.3:a:techsmith:camtasia_studio:1.0.1:*:*:*:*:*:*:*
techsmithcamtasia_studio1.1cpe:2.3:a:techsmith:camtasia_studio:1.1:*:*:*:*:*:*:*
techsmithcamtasia_studio1.1.1cpe:2.3:a:techsmith:camtasia_studio:1.1.1:*:*:*:*:*:*:*
techsmithcamtasia_studio2.0cpe:2.3:a:techsmith:camtasia_studio:2.0:*:*:*:*:*:*:*
techsmithcamtasia_studio2.0.1cpe:2.3:a:techsmith:camtasia_studio:2.0.1:*:*:*:*:*:*:*
techsmithcamtasia_studio2.0.2cpe:2.3:a:techsmith:camtasia_studio:2.0.2:*:*:*:*:*:*:*
techsmithcamtasia_studio2.0.3cpe:2.3:a:techsmith:camtasia_studio:2.0.3:*:*:*:*:*:*:*
techsmithcamtasia_studio2.0.4cpe:2.3:a:techsmith:camtasia_studio:2.0.4:*:*:*:*:*:*:*
Rows per page:
1-10 of 221

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6.1

Confidence

High

EPSS

0.034

Percentile

91.6%

Related for CVE-2008-6061