CVE-2016-7831: Medium severity fenrir portable sleipnir vulnerability
Published Jun 9, 2017
·Updated
Sleipnir 4 Black Edition for Mac 4.5.3 and earlier and Sleipnir 4 for Mac 4.5.3 and earlier (Mac App Store) may allow a remote attacker to spoof the URL display via a specially crafted webpage.
Affected Software
2 affected components
Fenrir-inc Sleipnir Mac<=4.5.3
Fenrir-inc Sleipnir Mac=4.5.3
Event History
Jun 9, 2017
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
DescriptionWeakness
Frequently Asked Questions
1
Who can exploit this issue?
A remote attacker can exploit it by persuading a user of an affected Sleipnir for Mac version to visit a specially crafted webpage. No attacker privileges are required.
2
Which installations are affected?
Sleipnir 4 Black Edition for Mac 4.5.3 and earlier, and the Mac App Store edition of Sleipnir 4 for Mac 4.5.3 and earlier, are affected.
3
What is the impact of successful exploitation?
An attacker may spoof the URL shown to the user, which can make a malicious webpage appear to be associated with a different address. The CVSS vector indicates low confidentiality and integrity impact, with no availability impact.