CVE ID | |
CVSS SCORE | 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P |
AFFECTED VENDORS |
Amazon |
AFFECTED PRODUCTS |
App Store |
TREND MICRO CUSTOMER PROTECTION | Trend Micro TippingPoint IPS customers are protected against this vulnerability by Digital Vaccine protection filter ID ['17033']. For further product information on the TippingPoint IPS: http://www.tippingpoint.com |
VULNERABILITY DETAILS |
The specific flaw exists within the search string variable. Starting the string with a closing script tag allows the attacker to insert HTML code. An attacker can chain this vulnerability with other vulnerabilities to install malicious applications.
|
ADDITIONAL DETAILS |
|
DISCLOSURE TIMELINE |
|
CREDIT | MWR Labs |