CVE-2010-5190
First published: Sun Aug 26 2012(Updated: )
The Active Content Transformation functionality in Blue Coat ProxySG before SGOS 4.3.4.2, 5.x before SGOS 5.4.5.1, 5.5 before SGOS 5.5.4.1, and 6.x before SGOS 6.1.2.1 allows remote attackers to bypass JavaScript detection via HTML entities.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Blue Coat ProxySG OS | <=4.3.4 | |
| Blue Coat ProxySG OS | =3.2.6 | |
| Blue Coat ProxySG OS | =4.1.2.1 | |
| Blue Coat ProxySG OS | =4.2.1.2 | |
| Blue Coat ProxySG OS | =4.2.1.6 | |
| Blue Coat ProxySG OS | =4.2.2 | |
| Blue Coat ProxySG OS | =4.2.2.1 | |
| Blue Coat ProxySG OS | =4.2.2.2 | |
| Blue Coat ProxySG OS | =4.2.3 | |
| Blue Coat ProxySG OS | =4.2.3.4 | |
| Blue Coat ProxySG OS | =4.2.3.7 | |
| Blue Coat ProxySG OS | =4.2.3.12 | |
| Blue Coat ProxySG OS | =4.2.3.21 | |
| Blue Coat ProxySG OS | =4.2.3.26 | |
| Blue Coat ProxySG OS | =4.2.4.1 | |
| Blue Coat ProxySG OS | =4.2.5 | |
| Blue Coat ProxySG OS | =4.2.5.1 | |
| Blue Coat ProxySG OS | =4.2.6 | |
| Blue Coat ProxySG OS | =4.2.6.1 | |
| Blue Coat ProxySG OS | =4.2.6.4 | |
| Blue Coat ProxySG OS | =4.2.7.1 | |
| Blue Coat ProxySG OS | =5.2.2.4 | |
| Blue Coat ProxySG OS | =5.4.5 | |
| Blue Coat ProxySG OS | =5.5.4 | |
| Blue Coat ProxySG OS | =6.1.2 | |
| Blue Coat ProxySG | ||
| Blue Coat ProxySG SG210-10 | ||
| Blue Coat ProxySG SG210-10 | ||
| Bluecoat ProxySG | ||
| Bluecoat ProxySG | ||
| Blue Coat ProxySG SG210-5 | ||
| Blue Coat ProxySG SG210-5 | ||
| Blue Coat ProxySG SG510-10 | ||
| Blue Coat ProxySG SG510-10 | ||
| Blue Coat ProxySG SG510-20 | ||
| Blue Coat ProxySG SG510-20 | ||
| Bluecoat ProxySG | ||
| Bluecoat ProxySG | ||
| Blue Coat ProxySG SG510-5 | ||
| Blue Coat ProxySG | ||
| Blue Coat ProxySG | ||
| Blue Coat ProxySG SG810-20 | ||
| Blue Coat ProxySG SG810-20 | ||
| Blue Coat ProxySG SG810-25 | ||
| Blue Coat ProxySG SG810-25 | ||
| Blue Coat ProxySG SG810-5 | ||
| Blue Coat ProxySG SG9000-10 | ||
| Blue Coat ProxySG SG9000-10 | ||
| Blue Coat ProxySG SG9000-20 | ||
| Blue Coat ProxySG SG9000-20 | ||
| Blue Coat ProxySG SG9000-5 | ||
| Blue Coat ProxySG SG9000-5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2010-5190?
CVE-2010-5190 has been classified as a medium severity vulnerability.
How do I fix CVE-2010-5190?
To fix CVE-2010-5190, you should upgrade to Blue Coat ProxySG SGOS version 4.3.4.2, 5.4.5.1, 5.5.4.1, or 6.1.2.1 or later.
What types of attacks can exploit CVE-2010-5190?
CVE-2010-5190 can be exploited by remote attackers to bypass JavaScript detection via HTML entities.
Which versions of Blue Coat ProxySG are affected by CVE-2010-5190?
CVE-2010-5190 affects Blue Coat ProxySG versions prior to SGOS 4.3.4.2, 5.x before SGOS 5.4.5.1, 5.5 before SGOS 5.5.4.1, and 6.x before SGOS 6.1.2.1.
How can I determine if my system is vulnerable to CVE-2010-5190?
You can determine if your system is vulnerable to CVE-2010-5190 by checking the current SGOS version of your Blue Coat ProxySG and comparing it to the known affected versions.
- collector/nvd-historical
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/weakness
- agent/author
- agent/references
- agent/severity
- agent/first-publish-date
- agent/event
- agent/description
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/bluecoat
- canonical/blue coat proxysg os
- version/blue coat proxysg os/4.3.4
- version/blue coat proxysg os/3.2.6
- version/blue coat proxysg os/4.1.2.1
- version/blue coat proxysg os/4.2.1.2
- version/blue coat proxysg os/4.2.1.6
- version/blue coat proxysg os/4.2.2
- version/blue coat proxysg os/4.2.2.1
- version/blue coat proxysg os/4.2.2.2
- version/blue coat proxysg os/4.2.3
- version/blue coat proxysg os/4.2.3.4
- version/blue coat proxysg os/4.2.3.7
- version/blue coat proxysg os/4.2.3.12
- version/blue coat proxysg os/4.2.3.21
- version/blue coat proxysg os/4.2.3.26
- version/blue coat proxysg os/4.2.4.1
- version/blue coat proxysg os/4.2.5
- version/blue coat proxysg os/4.2.5.1
- version/blue coat proxysg os/4.2.6
- version/blue coat proxysg os/4.2.6.1
- version/blue coat proxysg os/4.2.6.4
- version/blue coat proxysg os/4.2.7.1
- version/blue coat proxysg os/5.2.2.4
- version/blue coat proxysg os/5.4.5
- version/blue coat proxysg os/5.5.4
- version/blue coat proxysg os/6.1.2
- canonical/blue coat proxysg
- canonical/blue coat proxysg sg210-10
- canonical/bluecoat proxysg
- canonical/blue coat proxysg sg210-5
- canonical/blue coat proxysg sg510-10
- canonical/blue coat proxysg sg510-20
- canonical/blue coat proxysg sg510-5
- canonical/blue coat proxysg sg810-20
- canonical/blue coat proxysg sg810-25
- canonical/blue coat proxysg sg810-5
- canonical/blue coat proxysg sg9000-10
- canonical/blue coat proxysg sg9000-20
- canonical/blue coat proxysg sg9000-5