CVE-2017-20041

Published: Jun 13, 2022Modified: Nov 21, 2024

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

A vulnerability was found in Ucweb UC Browser 11.2.5.932. It has been classified as critical. Affected is an unknown function of the component HTML Handler. The manipulation of the argument title leads to improper restriction of rendered ui layers (URL). It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Affected (1)

Products: Ucweb: Uc Browser

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ucweb Uc Browser	Version 11.2.5.932

Related CWEs

Improper Restriction of Rendered UI Layers or Frames

The web application does not restrict or incorrectly restricts frame objects or UI layers that belong to another application or domain, which can lead to user confusion about which interface the user is interacting with.

References (4)

http://seclists.org/fulldisclosure/2017/Mar/36

Source: cna@vuldb.com

ExploitMailing ListThird Party Advisory

https://vuldb.com/?id.98214

Source: cna@vuldb.com

ExploitPermissions RequiredThird Party Advisory

http://seclists.org/fulldisclosure/2017/Mar/36

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitMailing ListThird Party Advisory

https://vuldb.com/?id.98214

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPermissions RequiredThird Party Advisory

Timeline

No history available yet.