CVE-2011-1976 EXPLOIT
4.3
MEDIUM · CVSS 2.0 · EPSS 20.8% (pctl 97)
Patch early
A public exploit exists.
Description
Cross-site scripting (XSS) vulnerability in the Report Viewer Control in Microsoft Visual Studio 2005 SP1 and Report Viewer 2005 SP1 allows remote attackers to inject arbitrary web script or HTML via a parameter in a data source, aka "Report Viewer Controls XSS Vulnerability."
Scoring
| CVSS | 4.3 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:M/Au:N/C:N/I:P/A:N |
| EPSS | 20.81% — more likely to be exploited than 97% of all CVEs |
| Weakness | CWE-79 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2011-08-10 |
| Last modified | 2026-06-16 |
Affected (2)
| Vendor | Product |
|---|---|
| microsoft | report viewer |
| microsoft | visual studio |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Microsoft Visual Studio Report Viewer 2005 Control - Multiple Cross-Site Scripting Vulnerabilities | 2011-08-09 |
References
- http://marc.info/?l=bugtraq&m=145326307707460&w=2
- http://www.securityfocus.com/bid/49033
- http://www.us-cert.gov/cas/techalerts/TA11-221A.html
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-067
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04945270
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12773
- http://marc.info/?l=bugtraq&m=145326307707460&w=2
- http://www.securityfocus.com/bid/49033
- http://www.us-cert.gov/cas/techalerts/TA11-221A.html
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-067
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04945270
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12773
→ the Explorer · watch your stack · NVD