PT-2018-11182 · Naver · Whale Browser

Kushal Arvind Shah · Publicado 2018-10-11 · Atualizado 2019-10-09 · CVE-2018-12449

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions The Whale browser installer versions 0.4.3.0 and earlier

Description The issue allows DLL hijacking, which can be exploited by an attacker.

Recommendations For versions 0.4.3.0 and earlier, update to a version later than 0.4.3.0 to resolve the issue.

Correção

Untrusted Search Path

Enumeração de Fraquezas

CWE-426

Identificadores relacionados

CVE-2018-12449

Produtos afetados

Whale Browser

Referências · 3

• https://cve.naver.com/detail/cve-2018-12449 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-12449 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-12449 · Nota de Segurança