PT-2015-5216 · Oxide+1 · Oxide-Qt+1

Publicado 2015-09-08 · Atualizado 2017-08-10 · CVE-2015-1332

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions oxide-qt versions prior to 1.9.1

Description The issue allows remote attackers to cause a denial of service or execute arbitrary code via a crafted website, exploiting the oxide::JavaScriptDialogManager function.

Recommendations For versions prior to 1.9.1, update to version 1.9.1 or later to resolve the issue.

Correção

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2015-1332

USN-2735-1

Produtos afetados

Ubuntu

Oxide-Qt

Referências · 33

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1299 · Nota de Segurança
• https://ubuntu.com/security/CVE-2015-1294 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2015-1293 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2015-1292 · Aviso do Fabricante
• http://people.canonical.com/~ubuntu-security/cve/2015/CVE-2015-1332.html · Nota
• https://osv.dev/vulnerability/USN-2735-1 · Aviso do Fabricante
• https://launchpad.net/ubuntu/+source/oxide-qt/1.9.1-0ubuntu0.15.04.1 · Nota
• https://bdu.fstec.ru/vul/2015-11285 · Nota de Segurança
• https://ubuntu.com/security/CVE-2015-1332 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-11284 · Nota de Segurança
• https://ubuntu.com/security/CVE-2015-1300 · Aviso do Fabricante
• http://ubuntu.com/usn/USN-2735-1 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2015-1301 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1300 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1332 · Nota de Segurança