PT-2017-6391 · Nw.Js · Nw.Js

Publicado 2017-10-17 · Atualizado 2017-11-08 · CVE-2014-9733

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions nw.js versions prior to 0.11.5

Description The issue allows remote attackers to have an unspecified impact via unknown vectors by simulating user input events in a normal frame.

Recommendations For versions prior to 0.11.5, update to version 0.11.5 or later to resolve the issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2014-9733

Produtos afetados

Nw.Js

Referências · 2

• https://github.com/nwjs/nw.js/blob/nw11/CHANGELOG.md · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-9733 · Nota de Segurança