CVE-2011-3642

Cross-site scripting (XSS) vulnerability in Flowplayer Flash 3.2.7 through 3.2.16, as used in the News system (news) extension for TYPO3 and Mahara, allows remote attackers to inject arbitrary web script or HTML via the plugin configuration directive in a reference to an external domain plugin.

CVSS v3.0 9.6 CRITICAL
CVSS v2.0 6.8 MEDIUM

9.6^/10

CVSS v3.0 : CRITICAL

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 6.0

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

6.8^/10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-009	Broken Link
http://secunia.com/advisories/58854	Third Party Advisory
https://www.securityfocus.com/bid/48651	Third Party Advisory VDB Entry
http://secunia.com/advisories/52074	Third Party Advisory
http://secunia.com/advisories/54206	Third Party Advisory
https://bugs.launchpad.net/mahara/+bug/1103748	Third Party Advisory
https://code.google.com/p/flowplayer-core/issues/detail?id=441	Exploit Third Party Advisory
https://mahara.org/interaction/forum/topic.php?id=5237	Third Party Advisory
http://web.appsec.ws/FlashExploitDatabase.php	Broken Link
http://appsec.ws/Presentations/FlashFlooding.pdf	Broken Link

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:flowplayer:flowplayer_flash::::::mahara::*
	cpe:2.3:a:flowplayer:flowplayer_flash::::::typo3::*

Information

Published : 2020-02-08 08:15

Updated : 2020-02-12 08:54

NVD link : CVE-2011-3642

Mitre link : CVE-2011-3642

JSON object : View

CWE

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Products Affected

flowplayer

flowplayer_flash

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-009", "name": "http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-009", "tags": ["Broken Link"], "refsource": "MISC"}, {"url": "http://secunia.com/advisories/58854", "name": "http://secunia.com/advisories/58854", "tags": ["Third Party Advisory"], "refsource": "MISC"}, {"url": "https://www.securityfocus.com/bid/48651", "name": "https://www.securityfocus.com/bid/48651", "tags": ["Third Party Advisory", "VDB Entry"], "refsource": "MISC"}, {"url": "http://secunia.com/advisories/52074", "name": "http://secunia.com/advisories/52074", "tags": ["Third Party Advisory"], "refsource": "MISC"}, {"url": "http://secunia.com/advisories/54206", "name": "http://secunia.com/advisories/54206", "tags": ["Third Party Advisory"], "refsource": "MISC"}, {"url": "https://bugs.launchpad.net/mahara/+bug/1103748", "name": "https://bugs.launchpad.net/mahara/+bug/1103748", "tags": ["Third Party Advisory"], "refsource": "MISC"}, {"url": "https://code.google.com/p/flowplayer-core/issues/detail?id=441", "name": "https://code.google.com/p/flowplayer-core/issues/detail?id=441", "tags": ["Exploit", "Third Party Advisory"], "refsource": "MISC"}, {"url": "https://mahara.org/interaction/forum/topic.php?id=5237", "name": "https://mahara.org/interaction/forum/topic.php?id=5237", "tags": ["Third Party Advisory"], "refsource": "MISC"}, {"url": "http://web.appsec.ws/FlashExploitDatabase.php", "name": "http://web.appsec.ws/FlashExploitDatabase.php", "tags": ["Broken Link"], "refsource": "MISC"}, {"url": "http://appsec.ws/Presentations/FlashFlooding.pdf", "name": "http://appsec.ws/Presentations/FlashFlooding.pdf", "tags": ["Broken Link"], "refsource": "MISC"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in Flowplayer Flash 3.2.7 through 3.2.16, as used in the News system (news) extension for TYPO3 and Mahara, allows remote attackers to inject arbitrary web script or HTML via the plugin configuration directive in a reference to an external domain plugin."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-79"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2011-3642", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "severity": "MEDIUM", "acInsufInfo": false, "impactScore": 6.4, "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}, "baseMetricV3": {"cvssV3": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.6, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 2.8}}, "publishedDate": "2020-02-08T16:15Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:flowplayer:flowplayer_flash:*:*:*:*:*:mahara:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "3.2.16", "versionStartIncluding": "3.2.7"}, {"cpe23Uri": "cpe:2.3:a:flowplayer:flowplayer_flash:*:*:*:*:*:typo3:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "3.2.16", "versionStartIncluding": "3.2.7"}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2020-02-12T16:54Z"}

9.6 /10