PT-2019-16005 · Midori · Midori Browser

Gareth Heyes · Publicado 2019-12-20 · Atualizado 2020-01-14 · CVE-2019-19916

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Midori Browser version 0.5.11

Description The issue arises from incorrect application of Content Security Policy (CSP) to multipart content sent with the multipart/x-mixed-replace MIME type. This could lead to script execution in areas where CSP should have blocked it, potentially allowing cross-site scripting (XSS) and other attacks when the product renders the content as HTML. The problem also involves consideration of the polyglot case, where a file can be both a valid image (e.g., GIF) and valid JavaScript.

Recommendations For Midori Browser version 0.5.11, consider updating to a version where this issue is resolved, as the current version does not correctly apply CSP to all parts of multipart content. As a temporary workaround, consider restricting the rendering of multipart content to minimize the risk of exploitation.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2019-19916

Produtos afetados

Midori Browser

Referências · 8

• 🔥 https://portswigger.net/research/bypassing-csp-using-polyglot-jpegs · Exploit
• 🔥 https://github.com/V1n1v131r4/MIME-Confusion-Attack-on-Midori-Browser/blob/master/README.md · Exploit
• https://ubuntu.com/security/CVE-2019-19916 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-19916 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-19916 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-19916 · Aviso do Fabricante
• https://blog.mozilla.org/security/2016/08/26/mitigating-mime-confusion-attacks-in-firefox · Nota
• https://cve.org/CVERecord?id=CVE-2019-19916 · Nota de Segurança