CVEvulnerability
CVE-2012-3351
6.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2020-02-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in LongTail Video JW Player through 5.10.2295 allow remote attackers to inject arbitrary web script or HTML via the (1) link, (2) logo.link, or (3) aboutlink parameter, or a nested URI scheme name for (4) javascript, (5) asfunction, or (6) vbscript.
Affected configurations
• longtailvideo jw player (<= 5.10.2295)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://developer.longtailvideo.com/trac/ticket/1585 Vendor Advisory
- http://technet.microsoft.com/security/msvr/msvr12-009 Third Party Advisory
- https://www.exploit-db.com/exploits/37552 Third Party Advisory, VDB Entry
- https://www.exploit-db.com/exploits/37672 Third Party Advisory, VDB Entry
- https://www.securityfocus.com/bid/54101/discuss Third Party Advisory, VDB Entry
- https://www.securityfocus.com/bid/55199/exploit Third Party Advisory, VDB Entry
- http://developer.longtailvideo.com/trac/ticket/1585 Vendor Advisory
- http://technet.microsoft.com/security/msvr/msvr12-009 Third Party Advisory
- https://www.exploit-db.com/exploits/37552 Third Party Advisory, VDB Entry
- https://www.exploit-db.com/exploits/37672 Third Party Advisory, VDB Entry
- https://www.securityfocus.com/bid/54101/discuss Third Party Advisory, VDB Entry
- https://www.securityfocus.com/bid/55199/exploit Third Party Advisory, VDB Entry