CVE-2011-1157

Related Files

Mandriva Linux Security Advisory 2011-082

Posted May 2, 2011

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2011-082 - Multiple vulnerabilities have been found and corrected in python-feedparser. Cross-site scripting vulnerability in feedparser.py in Universal Feed Parser before 5.0 allows remote attackers to inject arbitrary web script or HTML via vectors involving nested CDATA stanzas. feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) before 5.0.1 allows remote attackers to cause a denial of service via a malformed DOCTYPE declaration. Cross-site scripting vulnerability in feedparser.py in Universal Feed Parser 5.x before 5.0.1 allows remote attackers to inject arbitrary web script or HTML via malformed XML comments. Cross-site scripting vulnerability in feedparser.py in Universal Feed Parser 5.x before 5.0.1 allows remote attackers to inject arbitrary web script or HTML via an unexpected URI scheme, as demonstrated by a javascript: URI. The updated packages have been patched to correct these issues.

tags | advisory, remote, web, denial of service, arbitrary, javascript, vulnerability, xss, python

systems | linux, mandriva

advisories | CVE-2009-5065, CVE-2011-1156, CVE-2011-1157, CVE-2011-1158

SHA-256 | e71a73bc07b958a000011bac9bf9924d0241b15dd54914ceb4ddfebd3a0a6670

Download | Favorite | View