CVE-2013-6237

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.69%

Published

Dec 10, 2013

Modified

Apr 28, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The ISL Desktop plugin for Windows before 1.4.7 for ISL Light 3.5.4 and earlier allows remote authenticated users to obtain sensitive information by pasting the clipboard contents that have been copied by another user in the session.

Weaknesses (CWE)

CWE-200

Affected Products (5)

islonline · isl_desktop_pluginvulnerable

islonline · isl_lightvulnerable

References (12)

http://osvdb.org/100512

http://packetstormsecurity.com/files/124274/ISL-Light-Desktop-3.5.4-Information-Disclosure.html

Exploit

http://seclists.org/fulldisclosure/2013/Dec/14

Exploit

http://www.islonline.com/help/isl-releases-info/any/manual/?2013-11-29-rel-info-isl-light-desktop-plugin-1-4-7-win.htm

Patch

http://www.securityfocus.com/bid/64050

https://exchange.xforce.ibmcloud.com/vulnerabilities/89399

http://osvdb.org/100512

http://packetstormsecurity.com/files/124274/ISL-Light-Desktop-3.5.4-Information-Disclosure.html

Exploit

http://seclists.org/fulldisclosure/2013/Dec/14

Exploit

http://www.islonline.com/help/isl-releases-info/any/manual/?2013-11-29-rel-info-isl-light-desktop-plugin-1-4-7-win.htm

Patch

http://www.securityfocus.com/bid/64050

https://exchange.xforce.ibmcloud.com/vulnerabilities/89399

KEV Catalog EPSS Scores Vendors All CVEs