Vulnerabilites related to NewsGator Technologies, Inc. - FeedDemon
jvndb-2012-000056
Vulnerability from jvndb
Published
2012-06-07 15:39
Modified
2012-06-07 15:39
Severity ?
() - -
Summary
FeedDemon vulnerable to arbitrary script execution
Details
FeedDemon is vulnerable to arbitrary script execution. FeedDemon is an RSS/Atom feed reader. FeedDemon is vulnerable to arbitrary script execution due to the improper processing during HTML page output based on feed information when using the "feed preview" option. Daiki Fukumori of Cyber Defense Institute, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
Impacted products
Show details on JVN DB website


{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2012/JVNDB-2012-000056.html",
  "dc:date": "2012-06-07T15:39+09:00",
  "dcterms:issued": "2012-06-07T15:39+09:00",
  "dcterms:modified": "2012-06-07T15:39+09:00",
  "description": "FeedDemon is vulnerable to arbitrary script execution.\r\n\r\nFeedDemon is an RSS/Atom feed reader. FeedDemon is vulnerable to arbitrary script execution due to the improper processing during HTML page output based on feed information when using the \"feed preview\" option.\r\n\r\nDaiki Fukumori of Cyber Defense Institute, Inc. reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2012/JVNDB-2012-000056.html",
  "sec:cpe": {
    "#text": "cpe:/a:newsgator:feeddemon",
    "@product": "FeedDemon",
    "@vendor": "NewsGator Technologies, Inc.",
    "@version": "2.2"
  },
  "sec:cvss": {
    "@score": "4.3",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2012-000056",
  "sec:references": [
    {
      "#text": "http://jvn.jp/en/jp/JVN18397171/index.html",
      "@id": "JVN#18397171",
      "@source": "JVN"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2634",
      "@id": "CVE-2012-2634",
      "@source": "CVE"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-2634",
      "@id": "CVE-2012-2634",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-79",
      "@title": "Cross-site Scripting(CWE-79)"
    }
  ],
  "title": "FeedDemon vulnerable to arbitrary script execution"
}