PT-2009-1480 · W3C · W3C Amaya Web Browser

Nico Golde · Publicado 2009-01-28 · Atualizado 2009-02-17 · CVE-2008-6005

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions W3C Amaya Web Browser versions 10.0.1 through 11.0.1

Description The issue is related to multiple buffer overflows in the CheckUniqueName function, potentially allowing remote attackers to execute arbitrary code. This can be achieved by providing "duplicated" attribute value inputs.

Recommendations For versions 10.0.1 through 11.0.1, consider disabling the CheckUniqueName function as a temporary workaround until a patch is available.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2008-6005

Produtos afetados

W3C Amaya Web Browser

Referências · 3

• 🔥 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507587#15 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-6005 · Nota de Segurança
• http://securityfocus.com/bid/33736 · Nota