CVE-2011-1976: XSS
First published: Wed Aug 10 2011(Updated: )
Cross-site scripting (XSS) vulnerability in the Report Viewer Control in Microsoft Visual Studio 2005 SP1 and Report Viewer 2005 SP1 allows remote attackers to inject arbitrary web script or HTML via a parameter in a data source, aka "Report Viewer Controls XSS Vulnerability."
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Visual Studio | =2005-sp1 | |
| Microsoft Report Viewer | =2005-sp1 | |
| Microsoft Report Viewer | =2005-sp1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.us-cert.gov/cas/techalerts/TA11-221A.html
- http://marc.info/?l=bugtraq&m=145326307707460&w=2
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04945270
- http://www.securityfocus.com/bid/49033
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12773
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-067
Frequently Asked Questions
What is the severity of CVE-2011-1976?
CVE-2011-1976 has been classified as a medium severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2011-1976?
To fix CVE-2011-1976, it is recommended to apply the latest security updates provided by Microsoft for Visual Studio 2005 SP1 and Report Viewer 2005 SP1.
What types of attacks can exploit CVE-2011-1976?
CVE-2011-1976 can be exploited to perform cross-site scripting attacks, allowing attackers to inject arbitrary scripts into the web application.
Which software versions are affected by CVE-2011-1976?
CVE-2011-1976 affects Microsoft Visual Studio 2005 SP1 and Microsoft Report Viewer 2005 SP1.
Is CVE-2011-1976 associated with any specific applications?
CVE-2011-1976 is associated with the Report Viewer Control within Microsoft Visual Studio and Report Viewer products.
- collector/nvd-historical
- collector/nvd-index
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/severity
- agent/weakness
- agent/last-modified-date
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- vendor/microsoft
- canonical/microsoft visual studio
- version/microsoft visual studio/2005-sp1
- canonical/microsoft report viewer
- version/microsoft report viewer/2005-sp1