medium4.3Public exploit code
CVE-2010-1143
Cross-site scripting (XSS) vulnerability in VMware View (formerly Virtual Desktop Manager or VDM) 3.1.x before 3.1.3 build 252693 allows remote attackers to in…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- VMware View 3.1.x - URL Processing Cross-Site Scripting2010-05-05 · remote · multiple · Verified
- VMware View Portal 3.1 - Cross-Site Scripting2010-05-14 · webapps · multiple · Verified
Impact
Cross-site scripting (XSS) vulnerability in VMware View (formerly Virtual Desktop Manager or VDM) 3.1.x before 3.1.3 build 252693 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | View Manager | Versions 3.1.1, 3.1.2, 3.1.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.vmware.com/pipermail/security-announce/2010/000092.html
- http://security.gentoo.org/glsa/glsa-201209-25.xml
- http://securitytracker.com/id?1023945
- http://www.securityfocus.com/bid/39949
- http://www.vmware.com/security/advisories/VMSA-2010-0008.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16298
- http://lists.vmware.com/pipermail/security-announce/2010/000092.html
- http://security.gentoo.org/glsa/glsa-201209-25.xml
- http://securitytracker.com/id?1023945
- http://www.securityfocus.com/bid/39949
- http://www.vmware.com/security/advisories/VMSA-2010-0008.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16298