CVE-2012-3351

CVE-2012-3351 affects LongTail Video JW Player up to and including 5.10.2295 (and older 5.9.x in some advisories). The vulnerability is a set of XSS flaws in parameters (link, logo.link, aboutlink) or nested URI schemes (javascript, asfunction, vbscript) that could be exploited when a user clicks...

CVE-2012-2904

CVE-2012-2904 affects LongTail JW Player 5.9 (player.swf). The vulnerability is a cross-site scripting (XSS) flaw in the debug parameter, exploitable via multiple "javascript:" sequences to inject arbitrary web script or HTML. Root cause is insufficient input handling in the debug functionality. ...