PT-2009-1480 · W3C · W3C Amaya Web Browser

Nico Golde · Published 2009-01-28 · Updated 2009-02-17 · CVE-2008-6005

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions W3C Amaya Web Browser versions 10.0.1 through 11.0.1

Description The issue is related to multiple buffer overflows in the CheckUniqueName function, potentially allowing remote attackers to execute arbitrary code. This can be achieved by providing "duplicated" attribute value inputs.

Recommendations For versions 10.0.1 through 11.0.1, consider disabling the CheckUniqueName function as a temporary workaround until a patch is available.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2008-6005

Affected Products

W3C Amaya Web Browser

References · 3

• 🔥 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507587#15 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-6005 · Security Note
• http://securityfocus.com/bid/33736 · Note