PT-2017-15052 · Samsung · Samsung Internet Browser

James Lee · Publicado 2017-12-24 · Atualizado 2018-01-16 · CVE-2017-17859

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Samsung Internet Browser version 6.2.01.12

Description The issue allows remote attackers to bypass the Same Origin Policy and conduct UXSS attacks to obtain sensitive information. This is achieved via vectors involving an IFRAME element inside XSLT data in one part of an MHTML file. Specifically, JavaScript code in another part of this MHTML file does not have a document.domain value corresponding to the domain that is hosting the MHTML file, but instead has a document.domain value corresponding to an arbitrary URL within the content of the MHTML file.

Recommendations For Samsung Internet Browser version 6.2.01.12, as a temporary workaround, consider disabling the use of IFRAME elements inside XSLT data in MHTML files until a patch is available. Restrict access to MHTML files to minimize the risk of exploitation. Avoid using JavaScript code with arbitrary document.domain values in MHTML files until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2017-17859

Produtos afetados

Samsung Internet Browser

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-17859 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-17859 · Aviso do Fabricante
• https://poctestblog.blogspot.com/2017/12/samsung-internet-browser-sop-bypassuxss.html · Nota