vcodec2_hls_filter in libvoipCodec_v7a.so in the WeChat application through 7.0.3 for Android allows attackers to cause a denial of service (application crash) by replacing an emoji file (under the /sdcard/tencent/MicroMsg directory) with a crafted .wxgf file. The content of the replacement must be derived from the phone's IMEI. The crash occurs upon receiving a message that contains the replaced emoji.
References
| Link | Resource |
|---|---|
| http://packetstormsecurity.com/files/152947/WeChat-7.0.4-Denial-Of-Service.html | Third Party Advisory VDB Entry |
| https://awakened1712.github.io/hacking/hacking-wechat-dos/ | Exploit Technical Description |
| https://www.exploit-db.com/exploits/46853 | Exploit Third Party Advisory VDB Entry |
| http://packetstormsecurity.com/files/152947/WeChat-7.0.4-Denial-Of-Service.html | Third Party Advisory VDB Entry |
| https://awakened1712.github.io/hacking/hacking-wechat-dos/ | Exploit Technical Description |
| https://www.exploit-db.com/exploits/46853 | Exploit Third Party Advisory VDB Entry |
Configurations
History
21 Nov 2024, 04:21
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://packetstormsecurity.com/files/152947/WeChat-7.0.4-Denial-Of-Service.html - Third Party Advisory, VDB Entry | |
| References | () https://awakened1712.github.io/hacking/hacking-wechat-dos/ - Exploit, Technical Description | |
| References | () https://www.exploit-db.com/exploits/46853 - Exploit, Third Party Advisory, VDB Entry |
Information
Published : 2019-05-14 19:29
Updated : 2024-11-21 04:21
NVD link : CVE-2019-11419
Mitre link : CVE-2019-11419
CVE.ORG link : CVE-2019-11419
JSON object : View
Products Affected
tencent
CWE
CWE-476
NULL Pointer Dereference