CVE-2013-6237

Related Files

ISL Light Desktop 3.5.4 Information Disclosure

Posted Dec 3, 2013

Authored by Juan Francisco

ISL Light - Desktop version 3.5.4 suffers from an information disclosure vulnerability. In cases where a person is hosting a sharing session and allows a remote user to see what is happening on the local PC, it has been discovered that if you locally copy something like a hidden password to the local clipboard, then the remote user will be able to directly paste it in clear text into a notepad or other form of document, effectively gaining access to the password. It is not possible to lock this functionality.

tags | exploit, remote, local, info disclosure

advisories | CVE-2013-6237

SHA-256 | 9d0c82286b45ad8906e8301b87342b3bf556f6afcccf8574e717abd46e0af646

Download | Favorite | View