Lucene search

K
freebsdFreeBSDD560B346-08A2-11E0-BCCA-0050568452AC
HistoryOct 25, 2010 - 12:00 a.m.

YUI JavaScript library -- JavaScript injection exploits in Flash components

2010-10-2500:00:00
vuxml.freebsd.org
56

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.004 Low

EPSS

Percentile

71.8%

The YUI team reports:

A security-related defect was introduced in the YUI 2 Flash
component infrastructure beginning with the YUI 2.4.0 release.
This defect allows JavaScript injection exploits to be created
against domains that host affected YUI .swf files.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchyahoo-ui< 2.8.2UNKNOWN

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.004 Low

EPSS

Percentile

71.8%

Related for D560B346-08A2-11E0-BCCA-0050568452AC