vendor:
NetSurf Web Browser
by:
Jeremy Brown
7.5
CVSS
HIGH
Integer Overflow, Memory Leak
Integer Overflow, Memory Leak
CWE
Product Name: NetSurf Web Browser
Affected Version From: 1.2
Affected Version To:
Patch Exists: NO
Related CWE:
CPE: a:netsurf:netsurf_web_browser:1.2
Platforms Tested: Debian, Ubuntu, etc
2009
NetSurf Web Browser Multiple Vulnerabilities
Several bugs, including integer overflows and memory leaks, have been found in the NetSurf web browser. The researcher was able to overwrite the ESI register with their own data, which could lead to heap-based exploitation of the bugs. Large values passed to certain HTML tag attributes can trigger integer overflows when allocating memory.
Mitigation:
Update to the latest version of NetSurf Web Browser.