PT-2020-7169 · Netsurf · Netsurf

Jakub Wilk · Published 2020-02-21 · Updated 2020-02-24 · CVE-2012-0844

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Netsurf versions through 2.8

Description The issue is related to an information-disclosure vulnerability due to a world-readable cookie jar.

Recommendations For versions through 2.8, update to a version where the cookie jar is not world-readable to mitigate the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2012-0844

Affected Products

Netsurf

References · 9

• https://security-tracker.debian.org/tracker/CVE-2012-0844 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-0844 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2012-0844 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-0844 · Security Note
• https://t.me/cvenotify/1138 · Telegram Post
• http://openwall.com/lists/oss-security/2012/02/11/3 · Note
• https://access.redhat.com/security/cve/cve-2012-0844 · Note
• https://securityfocus.com/bid/51981 · Note
• https://t.me/cibsecurity/10019 · Telegram Post