EUVD-2017-8901

Malware in sbrugna...

BOSE SoundTouch cross-site scripting vulnerability (CNVD-2018-08339)

The BOSE SoundTouch is a wireless speaker device from the American company BOSE. A cross-site scripting vulnerability exists in BOSE SoundTouch. A remote attacker could exploit this vulnerability to compromise an itunes/pandora account with specially crafted song data from a music service...

Design/Logic Flaw

Bose SoundTouch devices allow XSS via crafted song data from a music service, as demonstrated by Pandora...

CVE-2017-17749

Bose SoundTouch devices allow XSS via crafted song data from a music service, as demonstrated by Pandora...

CVE-2017-17749

Bose SoundTouch devices are affected by a cross-site scripting (XSS) vulnerability triggered by specially crafted song data from a music service (e.g., Pandora). The issue arises in the handling of metadata or payload within song data, enabling an attacker-controlled input to be interpreted as ex...