Maxthon Browser Multiple Security Vulnerabilities
BID:56845
Info
Maxthon Browser Multiple Security Vulnerabilities
| Bugtraq ID: | 56845 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 03 2012 12:00AM |
| Updated: | Dec 03 2012 12:00AM |
| Credit: | Roberto Suggi Liverani |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Maxthon Browser Multiple Security Vulnerabilities
Maxthon Browser is prone to multiple security vulnerabilities including a security-bypass, an arbitrary command execution, and multiple HTML-injection vulnerabilities.
An attacker can exploit these issues to execute arbitrary script code within the context of the browser, steal cookie-based authentication credentials, bypass certain security restrictions, and perform unauthorized actions in the affected application and execute arbitrary commands within the context of the webserver.
Maxthon 3.4.5.2000 is vulnerable; other versions may also be affected.
Maxthon Browser is prone to multiple security vulnerabilities including a security-bypass, an arbitrary command execution, and multiple HTML-injection vulnerabilities.
An attacker can exploit these issues to execute arbitrary script code within the context of the browser, steal cookie-based authentication credentials, bypass certain security restrictions, and perform unauthorized actions in the affected application and execute arbitrary commands within the context of the webserver.
Maxthon 3.4.5.2000 is vulnerable; other versions may also be affected.
Exploit / POC
Maxthon Browser Multiple Security Vulnerabilities
Exploits are available, please see the reference for more information.
Exploits are available, please see the reference for more information.
Solution / Fix
Maxthon Browser Multiple Security Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]