PT-2014-6428 · Baidu · Baidu Spark Browser

Gjoko Krstic · Published 2014-08-19 · Updated 2014-08-20 · CVE-2014-5349

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Baidu Spark Browser version 26.5.9999.3511

Description The issue is related to a stack-based buffer overflow that can be triggered by remote attackers, causing the application to crash. This is achieved through nested calls to the window.print JavaScript function.

Recommendations For Baidu Spark Browser version 26.5.9999.3511, consider disabling the window.print JavaScript function as a temporary workaround until a patch is available.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2014-5349

Affected Products

Baidu Spark Browser

References · 5

• 🔥 http://exploit-db.com/exploits/33951 · Exploit
• 🔥 https://exploit-db.com/exploits/33951 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-5349 · Security Note
• http://zeroscience.mk/en/vulnerabilities/ZSL-2014-5190.php · Note
• http://osvdb.org/show/osvdb/108605 · Note