Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
HTTP:LONGTAIL-JW-XSS |
|---|---|
Severity |
Minor |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
LongTail Video JW Player XSS attempt detected |
Release Date |
2016/08/23 |
Update Number |
2771 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
HTTP: LongTail Video JW Player XSS attempt detected
This signature detects attempts to exploit a known vulnerability against LongTail Video JW Player. Attackers can inject cross-site scripting commands and take control of other user browsers.
Extended Description
Multiple cross-site scripting (XSS) vulnerabilities in LongTail Video JW Player through 5.10.2295 allow remote attackers to inject arbitrary web script or HTML via the (1) link, (2) logo.link, or (3) aboutlink parameter, or a nested URI scheme name for (4) javascript, (5) asfunction, or (6) vbscript.
Affected Products
- Longtailvideo jw_player 5.10.2295
References
- BugTraq: 54101
- CVE: CVE-2012-3351