PT-2017-7174 · Facebook · Facebook Proxygen

Publicado 2017-04-10 · Atualizado 2018-08-13 · CVE-2015-7264

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Facebook Proxygen versions prior to 2015-11-09

Description The issue concerns the SPDY/2 codec, which truncates a certain field to two bytes. This truncation allows for hijacking and injection attacks.

Recommendations For Facebook Proxygen versions prior to 2015-11-09, update to a version released after 2015-11-09 to resolve the issue.

Correção

Special Elements Injection

Enumeração de Fraquezas

CWE-74

Identificadores relacionados

CVE-2015-7264

Produtos afetados

Facebook Proxygen

Referências · 2

• https://groups.google.com/forum/#%21topic/facebook-proxygen/K8wCXbW4ihs · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-7264 · Nota de Segurança