PT-2023-31025 · Artistscope · Artistscope Artisbrowser

CVE-2023-49000

·

Publicado

2023-12-27

·

Atualizado

2024-09-20

CVSS v3.1

9.8

Crítica

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions ArtistScope ArtisBrowser versions 34.1.5 and before
Description An issue in ArtistScope ArtisBrowser allows an attacker to bypass intended access restrictions via interaction with the com.artis.browser.IntentReceiverActivity component. The vendor disputes this issue, indicating that ArtisBrowser 34 does not support CSS3.
Recommendations For ArtistScope ArtisBrowser versions 34.1.5 and before, as a temporary workaround, consider restricting interaction with the com.artis.browser.IntentReceiverActivity component until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Code Injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2023-49000
GHSA-866H-Q63M-66XM

Produtos afetados

Artistscope Artisbrowser