Skip to content

CVE-2017-20041 Ucweb UC Browser HTML URL improper restriction of rendered ui layers

MediumCVSS 6.5 EPSS 0.72%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

A vulnerability was found in Ucweb UC Browser 11.2.5.932. It has been classified as critical. Affected is an unknown function of the component HTML Handler. The manipulation of the argument title leads to improper restriction of rendered ui layers (URL). It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Affected products

ProductAffected versionsFixed in
ucweb uc browser = 11.2.5.932 No fix listed

References

  • seclists.org exploit mailing-list third-party-advisory
  • vuldb.com exploit permissions-required third-party-advisory