Unscored CVE-2005-1186 EUVD-2005-1189GHSA-92p6-cgwr-mcjv

Musicmatch Jukebox 10.00.2047 and earlier adds the musicmatch.com domain to the Trusted Sites zone in Internet Explorer, which allows syste…

Published Apr 19, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

Musicmatch Jukebox 10.00.2047 and earlier adds the musicmatch.com domain to the Trusted Sites zone in Internet Explorer, which allows systems in the domain to conduct unauthorized activities, as demonstrated using cross-site scripting (XSS) attacks.

References

http://www.hyperdose.com/advisories/H2005-04.txt
20050414 Trusted Site Cross Site Scripting Elevation of Privilege in Musicmatch mailing-list
jukebox-mmfwlaunch-gain-privileges(20129) vdb-entry
1013718 vdb-entry