exploitDog

CVE-2015-7893

Опубликовано: 11 апр. 2017

Источник: nvd

CVSS3: 8.8

CVSS2: 6.8

EPSS Средний

Описание

SecEmailUI in Samsung Galaxy S6 does not sanitize HTML email content, allows remote attackers to execute arbitrary JavaScript.

Ссылки

http://packetstormsecurity.com/files/135643/Samsung-SecEmailUI-Script-Injection.html
Third Party Advisory
http://www.securityfocus.com/bid/77431
Third Party Advisory
VDB Entry
https://bugs.chromium.org/p/project-zero/issues/detail?id=494&q=samsung&redir=1
Third Party Advisory
https://googleprojectzero.blogspot.ie/2015/11/hack-galaxy-hunting-bugs-in-samsung.html
Third Party Advisory
https://www.exploit-db.com/exploits/38554/
Exploit
Third Party Advisory
http://packetstormsecurity.com/files/135643/Samsung-SecEmailUI-Script-Injection.html
Third Party Advisory
http://www.securityfocus.com/bid/77431
Third Party Advisory
VDB Entry
https://bugs.chromium.org/p/project-zero/issues/detail?id=494&q=samsung&redir=1
Third Party Advisory
https://googleprojectzero.blogspot.ie/2015/11/hack-galaxy-hunting-bugs-in-samsung.html
Third Party Advisory
https://www.exploit-db.com/exploits/38554/
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:h:samsung:galaxy_s6:-:*:*:*:*:*:*:*

EPSS

Процентиль: 94%

0.13648

Средний

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-4xj3-xxm9-m323

CVSS3: 8.8

github

больше 3 лет назад

SecEmailUI in Samsung Galaxy S6 does not sanitize HTML email content, allows remote attackers to execute arbitrary JavaScript.

EPSS

Процентиль: 94%

0.13648

Средний

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-20