Description
Cross-site scripting (XSS) vulnerability in the chat client in IBM Lotus Sametime 7.5 and 7.5.1 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted message, which triggers code execution after a mouseover event initiated by the victim.
References
- 27316 vdb-entry
- 27942 third-party-advisory
- ADV-2008-0168 vdb-entry
- sametime-client-mouseover-xss(39726) vdb-entry
- 1019224 vdb-entry
- http://www-1.ibm.com/support/docview.wss?uid=swg21292938