CVE-2010-3918: Medium severity Fenrir-inc Sleipnir vulnerability
Published Dec 10, 2010
·Updated
Fenrir Sleipnir 2.9.6 and earlier does not prevent interaction between web script and the clipboard, which allows remote attackers to read or modify the clipboard contents via a crafted web site.
Affected Software
15 affected components
Fenrir-inc Sleipnir=2.8.0
Fenrir-inc Sleipnir=2.5.14
Fenrir-inc Sleipnir=2.9.5
Fenrir-inc Sleipnir=2.9.4
Fenrir-inc Sleipnir<=2.9.6
Fenrir-inc Sleipnir=2.7.2
Fenrir-inc Sleipnir=2.8.2
Fenrir-inc Sleipnir=2.5.12
Fenrir-inc Sleipnir=2.8.3
Fenrir-inc Sleipnir=2.9.1
Fenrir-inc Sleipnir=2.5.11
Fenrir-inc Sleipnir=2.9.2
Fenrir-inc Sleipnir=2.9.3
Fenrir-inc Sleipnir=2.8.1
Fenrir-inc Sleipnir=2.5.10
Remediation
Patch Available
Event History
Dec 10, 2010
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
Who is exposed to this issue?
Users of Fenrir Sleipnir 2.9.6 and earlier are exposed when they visit a crafted web site. Exploitation is remote and does not require authentication.
2
What could an attacker do through exploitation?
A malicious web site can use web script to read clipboard contents or modify them. The reported impact includes compromise of confidentiality and integrity, with no availability impact listed.
3
What should teams do to remediate the issue?
Apply the available patch. The affected versions are Sleipnir 2.9.6 and earlier.