Description (CNA)
Musicmatch Jukebox 10.00.2047 and earlier adds the musicmatch.com domain to the Trusted Sites zone in Internet Explorer, which allows systems in the domain to conduct unauthorized activities, as demonstrated using cross-site scripting (XSS) attacks.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.hyperdose.com/advisories/H2005-04.txt
- http://seclists.org/lists/bugtraq/2005/Apr/0212.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20129
- http://securitytracker.com/id?1013718
ADP enrichment
No English description supplied.