A vulnerability was found in Ucweb UC Browser 11.2.5.932. It has been classified as critical. Affected is an unknown function of the component HTML Handler. The manipulation of the argument title leads to improper restriction of rendered ui layers (URL). It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
References
Link | Resource |
---|---|
http://seclists.org/fulldisclosure/2017/Mar/36 | Exploit Mailing List Third Party Advisory |
https://vuldb.com/?id.98214 | Exploit Permissions Required Third Party Advisory |
Configurations
History
22 Jun 2022, 12:23
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : 4.3
v3 : 6.5 |
CWE | CWE-1021 | |
CPE | cpe:2.3:a:ucweb:uc_browser:11.2.5.932:*:*:*:*:android:*:* | |
References | (MISC) http://seclists.org/fulldisclosure/2017/Mar/36 - Exploit, Mailing List, Third Party Advisory | |
References | (MISC) https://vuldb.com/?id.98214 - Exploit, Permissions Required, Third Party Advisory |
13 Jun 2022, 07:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2022-06-13 07:15
Updated : 2024-02-04 22:29
NVD link : CVE-2017-20041
Mitre link : CVE-2017-20041
CVE.ORG link : CVE-2017-20041
JSON object : View
Products Affected
ucweb
- uc_browser
CWE
CWE-1021
Improper Restriction of Rendered UI Layers or Frames