CVE-2012-3414 SWFUpload <= 2.2.0.1 - Cross-Site Scripting
MediumCVSS 4.3
EPSS 9.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in swfupload.swf in SWFUpload 2.2.0.1 and earlier, as used in WordPress before 3.3.2, TinyMCE Image Manager 1.1, and other products, allows remote attackers to inject arbitrary web script or HTML via the movieName parameter, related to the "ExternalInterface.call" function.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/wordpress(Debian:12) | < 3.5.1+dfsg-1 | 3.5.1+dfsg-1 |
| debian/wordpress(Debian:13) | < 3.5.1+dfsg-1 | 3.5.1+dfsg-1 |
| debian/wordpress(Debian:14) | < 3.5.1+dfsg-1 | 3.5.1+dfsg-1 |
| swfupload project swfupload | <= 2.2.0.1 | No fix listed |
| swfupload project swfupload | = 1.0.2 | No fix listed |
| swfupload project swfupload | = 2.0.2 | No fix listed |
| swfupload project swfupload | = 2.1.0 | No fix listed |
| swfupload project swfupload | = 2.2.0 | No fix listed |
| tinymce image manager | = 1.1 | No fix listed |
| WordPress | <= 3.3.1 | No fix listed |
| WordPress | All versions | No fix listed |
| WordPress | = 3.0 | No fix listed |
| WordPress | = 3.0.1 | No fix listed |
| WordPress | = 3.0.2 | No fix listed |
| WordPress | = 3.0.3 | No fix listed |
| WordPress | = 3.0.4 | No fix listed |
| WordPress | = 3.0.5 | No fix listed |
| WordPress | = 3.0.6 | No fix listed |
| WordPress | = 3.1 | No fix listed |
| WordPress | = 3.1.1 | No fix listed |
| WordPress | = 3.1.2 | No fix listed |
| WordPress | = 3.1.3 | No fix listed |
| WordPress | = 3.1.4 | No fix listed |
| WordPress | = 3.2 | No fix listed |
| WordPress | = 3.2.1 | No fix listed |
Show 42 more
| Product | Affected versions | Fixed in |
|---|---|---|
| WordPress | = 3.3 | No fix listed |
| wordpress wp-ecommerce-cvs-importer(WordPress) | All versions | No fix listed |
| wordpress wp-image-news-slider(WordPress) | < 3.5 | 3.5 |
| wordpress apptha-banner(WordPress) | All versions | No fix listed |
| wordpress mac-dock-photogallery(WordPress) | <= 1.0 | No fix listed |
| wordpress comment-extra-field(WordPress) | <= 1.7 | No fix listed |
| wordpress sprapid(WordPress) | All versions | No fix listed |
| wordpress wysija-newsletters(WordPress) | < 2.1.7 | 2.1.7 |
| wordpress power-zoomer(WordPress) | < 2.3 | 2.3 |
| wordpress dm-albums(WordPress) | All versions | No fix listed |
| wordpress wp-powerplaygallery(WordPress) | < 3.2 | 3.2 |
| wordpress wp-dreamworkgallery(WordPress) | < 2.3 | 2.3 |
| wordpress wp-levoslideshow(WordPress) | < 2.3 | 2.3 |
| wordpress apptha-slider-gallery(WordPress) | All versions | No fix listed |
| wordpress smart-slide-show(WordPress) | < 2.4 | 2.4 |
| wordpress mac-dock-gallery(WordPress) | < 3.0 | 3.0 |
| wordpress slide-show-pro(WordPress) | < 2.4 | 2.4 |
| wordpress fluid-accessible-ui-options(WordPress) | All versions | No fix listed |
| wordpress spotlightyour(WordPress) | < 4.4 | 4.4 |
| wordpress blaze-slide-show-for-wordpress(WordPress) | < 2.6 | 2.6 |
| wordpress fresh-page(WordPress) | All versions | No fix listed |
| wordpress wp-3dbanner-rotator(WordPress) | < 2.2 | 2.2 |
| WordPress(WordPress) | < 3.3.2 | 3.3.2 |
| wordpress wp-bliss-gallery(WordPress) | < 2.3 | 2.3 |
| wordpress wp-carouselslideshow(WordPress) | < 3.11 | 3.11 |
| wordpress wp-matrix-gallery(WordPress) | < 2.3 | 2.3 |
| wordpress wp-royal-gallery(WordPress) | < 2.1 | 2.1 |
| wordpress wp-extended(WordPress) | All versions | No fix listed |
| wordpress wp-3dflick-slideshow(WordPress) | < 2.3 | 2.3 |
| wordpress wp-superb-slideshow(WordPress) | < 2.4 | 2.4 |
| wordpress wp-flipslideshow(WordPress) | < 2.2 | 2.2 |
| wordpress wp-vertical-gallery(WordPress) | < 2.3 | 2.3 |
| wordpress fluid-accessible-uploader(WordPress) | All versions | No fix listed |
| wordpress pdw-file-browser(WordPress) | All versions | No fix listed |
| wordpress wp-homepage-slideshow(WordPress) | < 2.3 | 2.3 |
| wordpress wp-yasslideshow(WordPress) | < 3.4 | 3.4 |
| wordpress flash-album-gallery(WordPress) | < 2.12 | 2.12 |
| wordpress fluid-accessible-pager(WordPress) | All versions | No fix listed |
| wordpress nextgen-gallery(WordPress) | < 1.9.7 | 1.9.7 |
| wordpress ultimate-tinymce(WordPress) | < 3.6 | 3.6 |
| wordpress fluid-accessible-rich-inline-edit(WordPress) | All versions | No fix listed |
| wordpress pica-photo-gallery(WordPress) | All versions | No fix listed |
References
- Debian Security Tracker CVE-2012-3414 vendor-advisory
- bugs.debian.org issue-tracking
- bot24.blogspot.ca exploit
- code.google.com
- make.wordpress.org vendor-advisory
- packetstormsecurity.com exploit
- [oss-security] 20120716 CVE id request: libjs-swfupload mailing-list
- [oss-security] 20120717 Re: CVE id request: libjs-swfupload mailing-list
- 54245 vdb-entry
- nealpoole.com exploit
- Wordfence Intelligence third-party-advisory
- www.cve.org
- Wordfence Intelligence third-party-advisory
- Wordfence Intelligence third-party-advisory