CVE-2005-1091

Impact

Maxthon 1.2.0 and 1.2.1 allows remote attackers to bypass the security ID and use restricted plugin API functions via script that includes the max.src file into the source page.

Affected packages

This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.

References

• NVD record
• CVE.org record
• http://secunia.com/advisories/14918
• http://www.osvdb.org/15424
• http://www.raffon.net/advisories/maxthon/multvulns.html
• http://www.securityfocus.com/bid/13073
• http://secunia.com/advisories/14918
• http://www.osvdb.org/15424
• http://www.raffon.net/advisories/maxthon/multvulns.html
• http://www.securityfocus.com/bid/13073