Candidate: CVE-2010-4207
PublicDate: 2010-11-07 22:00:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4207
Description:
 Cross-site scripting (XSS) vulnerability in the Flash component
 infrastructure in YUI 2.4.0 through 2.8.1, as used in Bugzilla, Moodle, and
 other products, allows remote attackers to inject arbitrary web script or
 HTML via vectors related to charts/assets/charts.swf.
Ubuntu-Description:
Notes:
Bugs:
Priority: medium
Discovered-by:
Assigned-to:
CVSS: 

Patches_yui:
upstream_yui: released (2.8.2r1~squeeze-1)
dapper_yui: DNE
hardy_yui: ignored (reached end-of-life)
karmic_yui: ignored (reached end-of-life)
lucid_yui: ignored (reached end-of-life)
maverick_yui: ignored (reached end-of-life)
natty_yui: not-affected (2.8.2r1~squeeze-1)
oneiric_yui: not-affected (2.8.2r1~squeeze-1)
precise_yui: not-affected (2.8.2r1~squeeze-1)
precise/esm_yui: DNE (precise was not-affected [2.8.2r1~squeeze-1])
quantal_yui: not-affected (2.8.2r1~squeeze-1)
raring_yui: not-affected (2.8.2r1~squeeze-1)
saucy_yui: not-affected (2.8.2r1~squeeze-1)
trusty_yui: not-affected (2.8.2r1~squeeze-1)
trusty/esm_yui: DNE (trusty was not-affected [2.8.2r1~squeeze-1])
utopic_yui: not-affected (2.8.2r1~squeeze-1)
vivid_yui: not-affected (2.8.2r1~squeeze-1)
vivid/stable-phone-overlay_yui: DNE
vivid/ubuntu-core_yui: DNE
wily_yui: not-affected (2.8.2r1~squeeze-1)
xenial_yui: not-affected (2.8.2r1~squeeze-1)
yakkety_yui: DNE
zesty_yui: DNE
artful_yui: DNE
bionic_yui: DNE
cosmic_yui: DNE
disco_yui: DNE
eoan_yui: DNE
focal_yui: DNE
groovy_yui: DNE
hirsute_yui: DNE
impish_yui: DNE
jammy_yui: DNE
devel_yui: DNE

Patches_moodle:
upstream_moodle: released (1.9.10)
dapper_moodle: ignored (reached end-of-life)
hardy_moodle: not-affected (uses libjs-yui)
karmic_moodle: ignored (reached end-of-life)
lucid_moodle: ignored (reached end-of-life)
maverick_moodle: ignored (reached end-of-life)
natty_moodle: ignored (reached end-of-life)
oneiric_moodle: ignored (reached end-of-life)
precise_moodle: ignored (reached end-of-life)
precise/esm_moodle: DNE (precise was needs-triage)
quantal_moodle: not-affected (2.2.2.dfsg-2)
raring_moodle: not-affected (2.2.2.dfsg-2)
saucy_moodle: not-affected (2.2.2.dfsg-2)
trusty_moodle: not-affected (2.2.2.dfsg-2)
trusty/esm_moodle: DNE (trusty was not-affected [2.2.2.dfsg-2])
utopic_moodle: not-affected (2.2.2.dfsg-2)
vivid_moodle: not-affected (2.2.2.dfsg-2)
vivid/stable-phone-overlay_moodle: DNE
vivid/ubuntu-core_moodle: DNE
wily_moodle: not-affected (2.2.2.dfsg-2)
xenial_moodle: not-affected (2.2.2.dfsg-2)
yakkety_moodle: not-affected (2.2.2.dfsg-2)
zesty_moodle: not-affected (2.2.2.dfsg-2)
artful_moodle: not-affected (2.2.2.dfsg-2)
bionic_moodle: not-affected (2.2.2.dfsg-2)
cosmic_moodle: not-affected (2.2.2.dfsg-2)
disco_moodle: not-affected (2.2.2.dfsg-2)
eoan_moodle: not-affected (2.2.2.dfsg-2)
focal_moodle: DNE
groovy_moodle: DNE
hirsute_moodle: DNE
impish_moodle: DNE
jammy_moodle: DNE
devel_moodle: DNE

Patches_otrs2:
upstream_otrs2: needs-triage
dapper_otrs2: DNE
hardy_otrs2: ignored (reached end-of-life)
karmic_otrs2: ignored (reached end-of-life)
lucid_otrs2: ignored (reached end-of-life)
maverick_otrs2: not-affected (uses libjs-yui)
natty_otrs2: not-affected (uses libjs-yui)
oneiric_otrs2: not-affected (uses libjs-yui)
precise_otrs2: not-affected (uses libjs-yui)
precise/esm_otrs2: DNE (precise was not-affected [uses libjs-yui])
quantal_otrs2: not-affected (uses libjs-yui)
raring_otrs2: not-affected (uses libjs-yui)
saucy_otrs2: not-affected (uses libjs-yui)
trusty_otrs2: not-affected (uses libjs-yui)
trusty/esm_otrs2: DNE (trusty was not-affected [uses libjs-yui])
utopic_otrs2: not-affected (uses libjs-yui)
vivid_otrs2: not-affected (uses libjs-yui)
vivid/stable-phone-overlay_otrs2: DNE
vivid/ubuntu-core_otrs2: DNE
wily_otrs2: not-affected (uses libjs-yui)
xenial_otrs2: not-affected (uses libjs-yui)
yakkety_otrs2: not-affected (uses libjs-yui)
zesty_otrs2: not-affected (uses libjs-yui)
artful_otrs2: not-affected (uses libjs-yui)
bionic_otrs2: not-affected (uses libjs-yui)
cosmic_otrs2: not-affected (uses libjs-yui)
disco_otrs2: not-affected (uses libjs-yui)
eoan_otrs2: not-affected (uses libjs-yui)
focal_otrs2: not-affected (uses libjs-yui)
groovy_otrs2: not-affected (uses libjs-yui)
hirsute_otrs2: not-affected (uses libjs-yui)
impish_otrs2: not-affected (uses libjs-yui)
jammy_otrs2: not-affected (uses libjs-yui)
devel_otrs2: not-affected (uses libjs-yui)

Patches_serendipity:
upstream_serendipity: needs-triage
dapper_serendipity: DNE
hardy_serendipity: ignored (reached end-of-life)
karmic_serendipity: ignored (reached end-of-life)
lucid_serendipity: ignored (reached end-of-life)
maverick_serendipity: not-affected (uses libjs-yui)
natty_serendipity: not-affected (uses libjs-yui)
oneiric_serendipity: not-affected (uses libjs-yui)
precise_serendipity: not-affected (uses libjs-yui)
precise/esm_serendipity: DNE (precise was not-affected [uses libjs-yui])
quantal_serendipity: not-affected (uses libjs-yui)
raring_serendipity: not-affected (uses libjs-yui)
saucy_serendipity: DNE
trusty_serendipity: DNE
trusty/esm_serendipity: DNE
utopic_serendipity: DNE
vivid_serendipity: DNE
vivid/stable-phone-overlay_serendipity: DNE
vivid/ubuntu-core_serendipity: DNE
wily_serendipity: DNE
xenial_serendipity: DNE
yakkety_serendipity: DNE
zesty_serendipity: DNE
artful_serendipity: DNE
bionic_serendipity: DNE
cosmic_serendipity: DNE
disco_serendipity: DNE
eoan_serendipity: DNE
focal_serendipity: DNE
groovy_serendipity: DNE
hirsute_serendipity: DNE
impish_serendipity: DNE
jammy_serendipity: DNE
devel_serendipity: DNE

Patches_jifty:
upstream_jifty: needs-triage
dapper_jifty: DNE
hardy_jifty: DNE
karmic_jifty: ignored (reached end-of-life)
lucid_jifty: ignored (reached end-of-life)
maverick_jifty: not-affected (uses libjs-yui)
natty_jifty: not-affected (uses libjs-yui)
oneiric_jifty: not-affected (uses libjs-yui)
precise_jifty: not-affected (uses libjs-yui)
precise/esm_jifty: DNE (precise was not-affected [uses libjs-yui])
quantal_jifty: not-affected (uses libjs-yui)
raring_jifty: not-affected (uses libjs-yui)
saucy_jifty: not-affected (uses libjs-yui)
trusty_jifty: not-affected (uses libjs-yui)
trusty/esm_jifty: DNE (trusty was not-affected [uses libjs-yui])
utopic_jifty: DNE
vivid_jifty: DNE
vivid/stable-phone-overlay_jifty: DNE
vivid/ubuntu-core_jifty: DNE
wily_jifty: DNE
xenial_jifty: DNE
yakkety_jifty: DNE
zesty_jifty: DNE
artful_jifty: DNE
bionic_jifty: DNE
cosmic_jifty: DNE
disco_jifty: DNE
eoan_jifty: DNE
focal_jifty: DNE
groovy_jifty: DNE
hirsute_jifty: DNE
impish_jifty: DNE
jammy_jifty: DNE
devel_jifty: DNE

Patches_webgui:
upstream_webgui: needs-triage
dapper_webgui: DNE
hardy_webgui: DNE
karmic_webgui: ignored (reached end-of-life)
lucid_webgui: ignored (reached end-of-life)
maverick_webgui: ignored (reached end-of-life)
natty_webgui: ignored (reached end-of-life)
oneiric_webgui: ignored (reached end-of-life)
precise_webgui: ignored (reached end-of-life)
precise/esm_webgui: DNE (precise was needs-triage)
quantal_webgui: ignored (reached end-of-life)
raring_webgui: ignored (reached end-of-life)
saucy_webgui: ignored (reached end-of-life)
trusty_webgui: ignored (reached end-of-life)
trusty/esm_webgui: DNE (trusty was needs-triage)
utopic_webgui: ignored (reached end-of-life)
vivid_webgui: ignored (reached end-of-life)
vivid/stable-phone-overlay_webgui: DNE
vivid/ubuntu-core_webgui: DNE
wily_webgui: ignored (reached end-of-life)
xenial_webgui: ignored (end of standard support, was needs-triage)
yakkety_webgui: DNE
zesty_webgui: DNE
artful_webgui: DNE
bionic_webgui: DNE
cosmic_webgui: DNE
disco_webgui: DNE
eoan_webgui: DNE
focal_webgui: DNE
groovy_webgui: DNE
hirsute_webgui: DNE
impish_webgui: DNE
jammy_webgui: DNE
devel_webgui: DNE

Patches_loggerhead:
upstream_loggerhead: needs-triage
dapper_loggerhead: DNE
hardy_loggerhead: DNE
karmic_loggerhead: ignored (reached end-of-life)
lucid_loggerhead: ignored (reached end-of-life)
maverick_loggerhead: ignored (reached end-of-life)
natty_loggerhead: ignored (reached end-of-life)
oneiric_loggerhead: ignored (reached end-of-life)
precise_loggerhead: ignored (reached end-of-life)
precise/esm_loggerhead: DNE (precise was needs-triage)
quantal_loggerhead: ignored (reached end-of-life)
raring_loggerhead: ignored (reached end-of-life)
saucy_loggerhead: ignored (reached end-of-life)
trusty_loggerhead: ignored (reached end-of-life)
trusty/esm_loggerhead: DNE (trusty was needs-triage)
utopic_loggerhead: ignored (reached end-of-life)
vivid_loggerhead: ignored (reached end-of-life)
vivid/stable-phone-overlay_loggerhead: DNE
vivid/ubuntu-core_loggerhead: DNE
wily_loggerhead: ignored (reached end-of-life)
xenial_loggerhead: ignored (end of standard support, was needs-triage)
yakkety_loggerhead: ignored (reached end-of-life)
zesty_loggerhead: ignored (reached end-of-life)
artful_loggerhead: ignored (reached end-of-life)
bionic_loggerhead: needs-triage
cosmic_loggerhead: ignored (reached end-of-life)
disco_loggerhead: ignored (reached end-of-life)
eoan_loggerhead: ignored (reached end-of-life)
focal_loggerhead: needs-triage
groovy_loggerhead: ignored (reached end-of-life)
hirsute_loggerhead: ignored (reached end-of-life)
impish_loggerhead: needs-triage
jammy_loggerhead: needs-triage
devel_loggerhead: needs-triage