CVE-2017-17553

{"id": "CVE-2017-17553", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": true, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "published": "2017-12-12T00:29:00.243", "references": [{"url": "https://github.com/VerSprite/research/blob/master/advisories/VS-2017-002.md", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://github.com/VerSprite/research/blob/master/advisories/VS-2017-002.md", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "The Dolphin Browser for Android 12.0.2 suffers from an insecure parsing implementation of the Intent URI scheme. This vulnerability could allow attackers to abuse this implementation through a malicious Intent URI, in order to invoke private Activities within the Dolphin Browser."}, {"lang": "es", "value": "Dolphin Browser 12.0.2 para Android tiene una implementaci\u00f3n insegura del an\u00e1lisis sint\u00e1ctico de la combinaci\u00f3n de la intent del URI. Esta vulnerabilidad podr\u00eda permitir que atacantes abusasen de esta implementaci\u00f3n mediante una intent de URI para invocar actividades privadas en el Dolphin Browser."}], "lastModified": "2024-11-21T03:18:09.077", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:changyou:dolphin:12.0.2:*:*:*:*:android:*:*", "vulnerable": true, "matchCriteriaId": "24474279-C36C-41C9-BFAE-2CB095DBC35F"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}