PT-2019-16611 · Oculus · Oculus Browser

Publicado 2019-04-29 · Atualizado 2019-10-09 · CVE-2019-3562

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Oculus Browser versions 5.2.7 through 5.7.11

Description A remote web page could inject arbitrary HTML code into the Oculus Browser UI, allowing an attacker to spoof UI and potentially execute code.

Recommendations For Oculus Browser versions 5.2.7 through 5.7.11, update to a version later than 5.7.11 to resolve the issue.

Correção

Special Elements Injection

XSS

Enumeração de Fraquezas

CWE-74

CWE-79

Identificadores relacionados

CVE-2019-3562

Produtos afetados

Oculus Browser

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-3562 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-3562 · Aviso do Fabricante
• https://facebook.com/security/advisories/cve-2019-3562 · Nota