PT-2024-5450 · Apple+2 · Safari+2

Published 2024-08-07 · Updated 2024-08-07

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Chromium (affected versions not specified) Firefox (affected versions not specified) Safari (affected versions not specified)

Description The issue is related to errors in processing input data in browser software. It may allow a remote attacker to execute arbitrary code if the user navigates to a specially crafted link.

Recommendations For Chromium, update to a version that includes a fix for this issue. For Firefox, update to a version that includes a fix for this issue. For Safari, update to a version that includes a fix for this issue. As a temporary workaround, consider avoiding navigation to untrusted links until a patch is available.

Fix

Weakness Enumeration

CWE-807

Related Identifiers

BDU:2024-06099

Affected Products

Chromium

Firefox

Safari

References · 2

• https://bdu.fstec.ru/vul/2024-06099 · Security Note
• https://oligo.security/blog/0-0-0-0-day-exploiting-localhost-apis-from-the-browser · Note