CVEvulnerability
CVE-2005-1091
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-05-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Maxthon 1.2.0 and 1.2.1 allows remote attackers to bypass the security ID and use restricted plugin API functions via script that includes the max.src file into the source page.
References
- http://secunia.com/advisories/14918 Patch, Vendor Advisory
- http://www.osvdb.org/15424 www.osvdb.org
- http://www.raffon.net/advisories/maxthon/multvulns.html Exploit, Patch, Vendor Advisory
- http://www.securityfocus.com/bid/13073 Exploit
- http://secunia.com/advisories/14918 Patch, Vendor Advisory
- http://www.osvdb.org/15424 www.osvdb.org
- http://www.raffon.net/advisories/maxthon/multvulns.html Exploit, Patch, Vendor Advisory
- http://www.securityfocus.com/bid/13073 Exploit