CVE-2016-7831: Medium severity fenrir portable sleipnir vulnerability

Q: Who can exploit this issue?

A remote attacker can exploit it by persuading a user of an affected Sleipnir for Mac version to visit a specially crafted webpage. No attacker privileges are required.

Q: Which installations are affected?

Sleipnir 4 Black Edition for Mac 4.5.3 and earlier, and the Mac App Store edition of Sleipnir 4 for Mac 4.5.3 and earlier, are affected.

Q: What is the impact of successful exploitation?

An attacker may spoof the URL shown to the user, which can make a malicious webpage appear to be associated with a different address. The CVSS vector indicates low confidentiality and integrity impact, with no availability impact.

Published Jun 9, 2017

Updated

Sleipnir 4 Black Edition for Mac 4.5.3 and earlier and Sleipnir 4 for Mac 4.5.3 and earlier (Mac App Store) may allow a remote attacker to spoof the URL display via a specially crafted webpage.

Affected Software

2 affected components

Fenrir-inc Sleipnir Mac<=4.5.3

Fenrir-inc Sleipnir Mac=4.5.3

Event History

Jun 9, 2017

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

DescriptionWeakness

Frequently Asked Questions

Who can exploit this issue?

A remote attacker can exploit it by persuading a user of an affected Sleipnir for Mac version to visit a specially crafted webpage. No attacker privileges are required.

Which installations are affected?

Sleipnir 4 Black Edition for Mac 4.5.3 and earlier, and the Mac App Store edition of Sleipnir 4 for Mac 4.5.3 and earlier, are affected.

What is the impact of successful exploitation?

An attacker may spoof the URL shown to the user, which can make a malicious webpage appear to be associated with a different address. The CVSS vector indicates low confidentiality and integrity impact, with no availability impact.

CVE-2016-7831: Medium severity fenrir portable sleipnir vulnerability

Affected Software

Event History

Frequently Asked Questions

Who can exploit this issue?

Which installations are affected?

What is the impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

Which installations are affected?

What is the impact of successful exploitation?