CVE-2012-6550: XSS
Cross-site scripting (XSS) vulnerability in ZeroClipboard before 1.1.4 allows remote attackers to inject arbitrary web script or HTML via "the clipText returned from the flash object," a different vulnerability than CVE-2013-1808.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-6550?
CVE-2012-6550 is considered a medium severity vulnerability due to its cross-site scripting (XSS) nature.
How do I fix CVE-2012-6550?
To fix CVE-2012-6550, you should upgrade to ZeroClipboard version 1.1.4 or later.
What causes CVE-2012-6550?
CVE-2012-6550 is caused by improper handling of user-inputted data in the 'clipText' returned from the Flash object.
Who is affected by CVE-2012-6550?
CVE-2012-6550 affects users of ZeroClipboard versions prior to 1.1.4, specifically versions up to 1.0.7 and 1.0.5.
What are the potential impacts of CVE-2012-6550?
The potential impacts of CVE-2012-6550 include unauthorized execution of arbitrary web scripts or HTML, which can lead to data theft or manipulation.