HPSBGN03534Vendor advisory
http://marc.info/?l=bugtraq&m=145326307707460&w=2 CVE-2011-1976
Microsoft Visual Studio Report Viewer 2005 Control - Multiple Cross-Site Scripting Vulnerabilities
Record summary
CVE-2011-1976 has a selected CVSS score of 4.3; EIP currently links 1 catalogued exploit.
Description
Cross-site scripting (XSS) vulnerability in the Report Viewer Control in Microsoft Visual Studio 2005 SP1 and Report Viewer 2005 SP1 allows remote attackers to inject arbitrary web script or HTML via a parameter in a data source, aka "Report Viewer Controls XSS Vulnerability."
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBMicrosoft Visual Studio Report Viewer 2005 Control - Multiple Cross-Site Scripting VulnerabilitiesExploitDB exploitby Adam BixbyNot analyzed1 file
References
749033vdb entry
http://www.securityfocus.com/bid/49033 TA11-221AThird-party advisory
http://www.us-cert.gov/cas/techalerts/TA11-221A.html MS11-067Vendor advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-067 h20566.www2.hpe.comConfirmation
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04945270 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2011-1976 oval:org.mitre.oval:def:12773vdb entrysignature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12773