[security bulletin] HPSBMI02614 SSRT100344 rev.1 - HP webOS Contacts Application, Remote Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02639302Version: 1 HPSBMI02614 SSRT100344 rev.1 - HP webOS Contacts Application, Remote Execution of Arbitrary Code NOTICE: The information in this Security Bulletin should be acted upon as soon ...

CVE-2010-4109

CVE-2010-4109 affects the HP webOS Contacts Application on Palm devices. The issue is a Cross-site Scripting (XSS) vulnerability exploitable via a crafted vCard file, enabling remote execution of arbitrary HTML/JavaScript. HP’s security bulletin and related documents indicate affected software ve...