Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-11396

Опубликовано: 23 мая 2018
Источник: nvd
CVSS3: 7.5
CVSS2: 5
EPSS Низкий

Описание

ephy-session.c in libephymain.so in GNOME Web (aka Epiphany) through 3.28.2.1 allows remote attackers to cause a denial of service (application crash) via JavaScript code that triggers access to a NULL URL, as demonstrated by a crafted window.open call.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:gnome:epiphany:*:*:*:*:*:*:*:*
Версия до 3.28.2.1 (включая)

EPSS

Процентиль: 71%
0.00685
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 7 лет назад

ephy-session.c in libephymain.so in GNOME Web (aka Epiphany) through 3.28.2.1 allows remote attackers to cause a denial of service (application crash) via JavaScript code that triggers access to a NULL URL, as demonstrated by a crafted window.open call.

CVSS3: 7.5
debian
больше 7 лет назад

ephy-session.c in libephymain.so in GNOME Web (aka Epiphany) through 3 ...

suse-cvrf
больше 6 лет назад

Security update for epiphany

CVSS3: 7.5
github
больше 3 лет назад

ephy-session.c in libephymain.so in GNOME Web (aka Epiphany) through 3.28.2.1 allows remote attackers to cause a denial of service (application crash) via JavaScript code that triggers access to a NULL URL, as demonstrated by a crafted window.open call.

EPSS

Процентиль: 71%
0.00685
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo