CVEvulnerability
CVE-2005-1186
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-05-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Description
Musicmatch Jukebox 10.00.2047 and earlier adds the musicmatch.com domain to the Trusted Sites zone in Internet Explorer, which allows systems in the domain to conduct unauthorized activities, as demonstrated using cross-site scripting (XSS) attacks.
Affected configurations
• musicmatch jukebox (<= 10.00.2047)
References
- http://seclists.org/lists/bugtraq/2005/Apr/0212.html Patch
- http://securitytracker.com/id?1013718 Patch
- http://www.hyperdose.com/advisories/H2005-04.txt Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20129 exchange.xforce.ibmcloud.com
- http://seclists.org/lists/bugtraq/2005/Apr/0212.html Patch
- http://securitytracker.com/id?1013718 Patch
- http://www.hyperdose.com/advisories/H2005-04.txt Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20129 exchange.xforce.ibmcloud.com