CVE-2012-2648: XSS
Published Aug 7, 2012
·Updated
Cross-site scripting (XSS) vulnerability in the GoodReader app 3.16 and earlier for iOS on the iPad, and 3.15.1 and earlier for iOS on the iPhone and iPod touch, allows remote attackers to inject arbitrary web script or HTML via vectors involving use of this app in conjunction with a web browser.
Affected Software
58 affected components
Goodiware Goodreader Iphone Os<=3.16
Goodiware Goodreader Iphone Os=1.1
Goodiware Goodreader Iphone Os=2.0
Goodiware Goodreader Iphone Os=2.1
Goodiware Goodreader Iphone Os=2.2
Goodiware Goodreader Iphone Os=2.3
Goodiware Goodreader Iphone Os=2.4
Goodiware Goodreader Iphone Os=2.5
Goodiware Goodreader Iphone Os=2.5.1
Goodiware Goodreader Iphone Os=2.6
Goodiware Goodreader Iphone Os=2.7
Goodiware Goodreader Iphone Os=2.7.4
Goodiware Goodreader Iphone Os=2.8
Goodiware Goodreader Iphone Os=2.8.4
Goodiware Goodreader Iphone Os=3.0.0
Goodiware Goodreader Iphone Os=3.0.1
Goodiware Goodreader Iphone Os=3.0.2
Goodiware Goodreader Iphone Os=3.0.3
Goodiware Goodreader Iphone Os=3.1.0
Goodiware Goodreader Iphone Os=3.1.2
Goodiware Goodreader Iphone Os=3.2.0
Goodiware Goodreader Iphone Os=3.3.0
Goodiware Goodreader Iphone Os=3.3.1
Goodiware Goodreader Iphone Os=3.4.0
Goodiware Goodreader Iphone Os=3.4.1
Goodiware Goodreader Iphone Os=3.5.0
Goodiware Goodreader Iphone Os=3.5.1
Goodiware Goodreader Iphone Os=3.6.0
Goodiware Goodreader Iphone Os=3.6.1
Goodiware Goodreader Iphone Os=3.7.0
Goodiware Goodreader Iphone Os=3.7.1
Goodiware Goodreader Iphone Os=3.8.0
Goodiware Goodreader Iphone Os=3.9.0
Goodiware Goodreader Iphone Os=3.10.0
Goodiware Goodreader Iphone Os=3.10.1
Goodiware Goodreader Iphone Os=3.10.2
Goodiware Goodreader Iphone Os=3.10.3
Goodiware Goodreader Iphone Os=3.11.0
Goodiware Goodreader Iphone Os=3.11.1
Goodiware Goodreader Iphone Os=3.12.0
Goodiware Goodreader Iphone Os=3.13.0
Goodiware Goodreader Iphone Os=3.13.1
Goodiware Goodreader Iphone Os=3.14.0
Goodiware Goodreader Iphone Os=3.14.2
Goodiware Goodreader Iphone Os=3.15.0
Goodiware Goodreader Iphone Os=3.15.1
Apple iPad
Goodiware Goodreader Iphone Os<=3.15.1
Goodiware Goodreader Iphone Os=2.8.2
Goodiware Goodreader Iphone Os=2.8.5
Goodiware Goodreader Iphone Os=3.2.1
Goodiware Goodreader Iphone Os=3.2.3
Goodiware Goodreader Iphone Os=3.8.1
Goodiware Goodreader Iphone Os=3.9.1
Goodiware Goodreader Iphone Os=3.12.1
Goodiware Goodreader Iphone Os=3.14.1
Apple iPod touch
Apple iPhone OS
Event History
Aug 7, 2012
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-2648?
CVE-2012-2648 is classified as a medium severity vulnerability.
2
How do I fix CVE-2012-2648?
To fix CVE-2012-2648, update the GoodReader app to version 3.17 or later.
3
What type of vulnerability is CVE-2012-2648?
CVE-2012-2648 is a cross-site scripting (XSS) vulnerability.
4
Which versions of GoodReader are affected by CVE-2012-2648?
CVE-2012-2648 affects GoodReader versions 3.16 and earlier for iOS on iPad, and 3.15.1 and earlier for iPhone and iPod touch.
5
Can CVE-2012-2648 be exploited remotely?
Yes, CVE-2012-2648 allows remote attackers to inject arbitrary web scripts or HTML.