Vulnerabilities for Internet browser (...) - CXSECURITY.COM

Vulnerabilities for 'Internet browser'

2017-12-27

CVE-2017-17859

CWE-79

Samsung Internet Browser 6.2.01.12 allows remote attackers to bypass the Same Origin Policy, and conduct UXSS attacks to obtain sensitive information, via vectors involving an IFRAME element inside XSLT data in one part of an MHTML file. Specifically, JavaScript code in another part of this MHTML file does not have a document.domain value corresponding to the domain that is hosting the MHTML file, but instead has a document.domain value corresponding to an arbitrary URL within the content of the MHTML file.

2017-12-21

CVE-2017-17692

CWE-200

Samsung Internet Browser 5.4.02.3 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript code that redirects to a child tab and rewrites the innerHTML property.

>>> Vendor: Samsung 141 Products

Ml-85g gdi printer driver

Ml-85p printer driver

Scx-4200 driver

Data management server

Series 5 chromebook

Series 5 550 chromebook

Printer firmware

Ps50c7700 television

Ps50c7700 television firmware

Ipolis device manager

Samsung security manager

Exynos fimg2d driver

Samsung account app

M288ofw firmware

Galaxy s6 firmware

Galaxy note 3 firmware

Galaxy s4 mini firmware

Galaxy s4 firmware

Galaxy s4 mini lte firmware

Galaxy s6 edge firmware

Srn 1670d firmware

Srn 472s firmware

Srn 1000 firmware

Srn 470d firmware

850 pro firmware

Internet browser

Knox enterprise mobility management

Knox identity access management

Display solutions

Syncthru web service

Sth-eth-250 firmware

Smartthings hub sth-eth-250-firmware

Galaxy s8 firmware

840 evo firmware

850 evo firmware

Scx-6545x firmware

X7400gx firmware

Xcover 4 firmware

Scx-824 firmware

Samsung firmware

Samsung members

Samsung internet browser

M2m1shot driver

See all Products for Vendor Samsung

Copyright 2024, cxsecurity.com