Cross-Site Scripting Vulnerability in Flock Browser by Flock
CVE-2010-3262

Currently unrated

Key Information:

Vendor: Flock
Status: Flock
Vendor: CVE Published:; 20 September 2010

What is CVE-2010-3262?

The Flock Browser versions prior to 3.0.0.4114 are susceptible to a cross-site scripting (XSS) vulnerability that allows attackers to execute arbitrary web scripts or HTML by manipulating crafted RSS feeds. This flaw can enable unauthorized access to sensitive user information or facilitate further attacks if exploited effectively. Users are strongly advised to update their browsers to mitigate the risk associated with this vulnerability.

References

http://www.securityfocus.com/bid/43225

vdb-entryx_refsource_BID

http://flock.com/security/

x_refsource_CONFIRM

http://www.securityfocus.com/archive/1/513701/100/0/threaded

mailing-listx_refsource_BUGTRAQ

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 20, 2010
Vulnerability Reserved
Sep 7, 2010

CVE-2010-3262 Data

JSON