PT-2014-6428 · Baidu · Baidu Spark Browser

Gjoko Krstic · Publicado 2014-08-19 · Atualizado 2014-08-20 · CVE-2014-5349

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Baidu Spark Browser version 26.5.9999.3511

Description The issue is related to a stack-based buffer overflow that can be triggered by remote attackers, causing the application to crash. This is achieved through nested calls to the window.print JavaScript function.

Recommendations For Baidu Spark Browser version 26.5.9999.3511, consider disabling the window.print JavaScript function as a temporary workaround until a patch is available.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2014-5349

Produtos afetados

Baidu Spark Browser

Referências · 5

• 🔥 http://exploit-db.com/exploits/33951 · Exploit
• 🔥 https://exploit-db.com/exploits/33951 · Exploit
• http://zeroscience.mk/en/vulnerabilities/ZSL-2014-5190.php · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-5349 · Nota de Segurança
• http://osvdb.org/show/osvdb/108605 · Nota