REDHAT-BUG-529833: XSS

Published Oct 20, 2009

Updated

Several cross-site scripting (XSS) flaws were found in the way CUPS web server interface used to process HTML form(s) content. A remote attacker could provide a specially-crafted HTML page(s), which once visited, by a local, unsuspecting user could lead to intended client-side security mechanisms bypass or, potentially, to injecting of malicious scripts into web pages, processed by CUPS web interface.

Acknowledgements:

Red Hat would like to thank Aaron Sigel of Apple Product Security for responsibly reporting this issue.

Affected Software

1 affected component

apple CUPS

Event History

Oct 20, 2009

Data Sourced

via Red Hat·11:28 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-529833?

The severity of REDHAT-BUG-529833 is considered high due to the potential for cross-site scripting attacks.

How do I fix REDHAT-BUG-529833?

To fix REDHAT-BUG-529833, ensure you are using the latest version of Apple CUPS with all relevant patches applied.

What type of vulnerability is REDHAT-BUG-529833?

REDHAT-BUG-529833 is classified as a cross-site scripting (XSS) vulnerability.

Who is affected by REDHAT-BUG-529833?

Users of Apple CUPS are affected by the vulnerability identified as REDHAT-BUG-529833.

Can REDHAT-BUG-529833 be exploited remotely?

Yes, REDHAT-BUG-529833 can be exploited remotely by tricking a user into visiting a malicious HTML page.