Sleipnir Clipboard Access Security Bypass Vulnerability

Bugtraq ID:	45132
Class:	Design Error
CVE:	CVE-2010-3918 CVE-2010-3919
Remote:	Yes
Local:	No
Published:	Nov 25 2010 12:00AM
Updated:	Nov 25 2010 12:00AM
Credit:	Reported by the vendor.
Vulnerable:	Fenrir & Co. Sleipnir 2.9.6 Fenrir & Co. Sleipnir 2.9.5 Fenrir & Co. Sleipnir 2.9.4 Fenrir & Co. Sleipnir 2.7.2 Fenrir & Co. Sleipnir 2.7.1 Fenrir & Co. Sleipnir 2.49 Fenrir & Co. Grani 4.4 Fenrir & Co. Grani 4.5 Fenrir & Co. Grani 4
Not Vulnerable:

Sleipnir Clipboard Access Security Bypass Vulnerability

Sleipnir is prone to a security-bypass vulnerability.

Successful exploits may allow attackers to bypass security restrictions and gain access to or modify the contents of the clipboard.

Sleipnir versions 2.9.6 and prior are vulnerable.

Sleipnir Clipboard Access Security Bypass Vulnerability

Attackers can exploit this issue by enticing a user to visit a malicious website.

Sleipnir Clipboard Access Security Bypass Vulnerability

Solution:
The vendor has released an update to address the issue. Please see the references for more information.

Sleipnir Clipboard Access Security Bypass Vulnerability

References:

• Fenrir Homepage (Fenrir)
  
• Vendor Advisory (Fenrir)