JVN#33861625: Iwate Portal Bar vulnerable to arbitrary script execution

Iwate Portal Bar is an add-on to Internet Explorer that adds a toolbar and provides multiple functions. The RSS/Atom feed reader function in Iwate Portal Bar is vulnerable to arbitrary script execution due to the improper processing during HTML page output based on feed information.

Impact

An arbitrary script may be executed on the user’s Internet Explorer.

Solution

Do not use Iwate Portal Bar
Please stop use of Iwate Portal Bar according to the information provided by the developer.
The developer has stopped distributing the product.

Products Affected

• Iwate Portal Bar