Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-11396

Опубликовано: 23 мая 2018
Источник: nvd
CVSS3: 7.5
CVSS2: 5
EPSS Низкий

Описание

ephy-session.c in libephymain.so in GNOME Web (aka Epiphany) through 3.28.2.1 allows remote attackers to cause a denial of service (application crash) via JavaScript code that triggers access to a NULL URL, as demonstrated by a crafted window.open call.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:gnome:epiphany:*:*:*:*:*:*:*:*
Версия до 3.28.2.1 (включая)

EPSS

Процентиль: 72%
0.01494
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 8 лет назад

ephy-session.c in libephymain.so in GNOME Web (aka Epiphany) through 3.28.2.1 allows remote attackers to cause a denial of service (application crash) via JavaScript code that triggers access to a NULL URL, as demonstrated by a crafted window.open call.

CVSS3: 7.5
debian
около 8 лет назад

ephy-session.c in libephymain.so in GNOME Web (aka Epiphany) through 3 ...

suse-cvrf
почти 7 лет назад

Security update for epiphany

CVSS3: 7.5
github
больше 4 лет назад

ephy-session.c in libephymain.so in GNOME Web (aka Epiphany) through 3.28.2.1 allows remote attackers to cause a denial of service (application crash) via JavaScript code that triggers access to a NULL URL, as demonstrated by a crafted window.open call.

EPSS

Процентиль: 72%
0.01494
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo