CVE-2017-17859 — MEDIUM (6.1)

Vulnerability Description

Samsung Internet Browser 6.2.01.12 allows remote attackers to bypass the Same Origin Policy, and conduct UXSS attacks to obtain sensitive information, via vectors involving an IFRAME element inside XSLT data in one part of an MHTML file. Specifically, JavaScript code in another part of this MHTML file does not have a document.domain value corresponding to the domain that is hosting the MHTML file, but instead has a document.domain value corresponding to an arbitrary URL within the content of the MHTML file.

CVSS Score

6.1

MEDIUM

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality

LOW

Integrity

LOW

Availability

NONE

Affected Products

Vendor	Product	Versions
Samsung	Internet Browser	6.2.01.12

Related Weaknesses (CWE)

CWE-79

References

https://poctestblog.blogspot.com/2017/12/samsung-internet-browser-sop-bypassuxssThird Party Advisory
https://poctestblog.blogspot.com/2017/12/samsung-internet-browser-sop-bypassuxssThird Party Advisory

FAQ

What is CVE-2017-17859?

CVE-2017-17859 is a vulnerability with a CVSS score of 6.1 (MEDIUM). Samsung Internet Browser 6.2.01.12 allows remote attackers to bypass the Same Origin Policy, and conduct UXSS attacks to obtain sensitive information, via vectors involving an IFRAME element inside XS...

How severe is CVE-2017-17859?

CVE-2017-17859 has been rated MEDIUM with a CVSS base score of 6.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2017-17859?

Check the references section above for vendor advisories and patch information. Affected products include: Samsung Internet Browser.