IBM Lotus Sametime Connect Client Mouseover XSS

Medium Nessus Plugin ID 70072


The remote Windows host has a chat client installed that is affected by a cross-site scripting vulnerability.


The version of IBM Lotus Sametime Connect installed on the remote Windows host is 7.5 or 7.5.1. Such versions are potentially affected by a cross-site scripting vulnerability. By tricking a user into moving the mouse cursor over specially crafted content, an attacker could execute arbitrary script code on the remote host subject to the privileges of the user running the affected application.


Upgrade to Lotus Sametime Connect Client 7.5.1 CF1 or later.

See Also

Plugin Details

Severity: Medium

ID: 70072

File Name: lotus_sametime_connect_swg21292938.nasl

Version: $Revision: 1.3 $

Type: local

Agent: windows

Family: Windows

Published: 2013/09/23

Modified: 2016/05/16

Dependencies: 70071

Risk Information

Risk Factor: Medium


Base Score: 4.3

Temporal Score: 3.7

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

Temporal Vector: CVSS2#E:ND/RL:OF/RC:C

Vulnerability Information

CPE: cpe:/a:ibm:lotus_sametime

Required KB Items: SMB/IBM Lotus Sametime Client/Path, SMB/IBM Lotus Sametime Client/Version

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2008/01/18

Vulnerability Publication Date: 2008/01/16

Reference Information

CVE: CVE-2008-0354

BID: 27316

OSVDB: 40536

IAVA: 2008-A-0001

CWE: 79