CVE-2008-0354

Currently unrated

Key Information:

Vendor
IBM
Status
Lotus Sametime
Vendor
CVE Published:
18 January 2008

Summary

Cross-site scripting (XSS) vulnerability in the chat client in IBM Lotus Sametime 7.5 and 7.5.1 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted message, which triggers code execution after a mouseover event initiated by the victim.

References

http://www.securityfocus.com/bid/27316
vdb-entryx_refsource_BID
http://secunia.com/advisories/27942
third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2008/0168
vdb-entryx_refsource_VUPEN

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.