Lucene search

[email protected]CVE-2005-1091

HistoryMay 02, 2005 - 4:00 a.m.

CVE-2005-1091

2005-05-0204:00:00

[email protected]

web.nvd.nist.gov

maxthon

security bypass

remote attack

plugin api

cve-2005-1091

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.2 High

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.3%

JSON

Maxthon 1.2.0 and 1.2.1 allows remote attackers to bypass the security ID and use restricted plugin API functions via script that includes the max.src file into the source page.

Affected configurations

NVD

Node

maxthonmaxthonMatch1.2

maxthonmaxthonMatch1.2.1

References

secunia.com/advisories/14918

www.osvdb.org/15424

www.raffon.net/advisories/maxthon/multvulns.html

www.securityfocus.com/bid/13073

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.2 High

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.3%

JSON

Related for CVE-2005-1091

cvelist1 nvd1