CVE-2023-3434

CVSS V2 None CVSS V3 None

Description

Improper Input Validation in the hyperlink interpretation in Savoir-faire Linux's Jami (version 20222284) on Windows. This allows an attacker to send a custom HTML anchor tag to pass a string value to the Windows QRC Handler through the Jami messenger.

Overview

CVE ID
CVE-2023-3434

Assigner
BLSOPS

Vulnerability Status
PUBLISHED

Published Version
2023-07-14T12:29:34.563Z

Last Modified Date
2023-07-14T12:29:34.563Z

Weakness Enumerations

CWE	URL
CWE-20	http://cwe.mitre.org/data/definitions/20.html

References

Reference URL	Reference Tags
https://review.jami.net/c/jami-client-qt/+/23569
https://git.jami.net/savoirfairelinux/jami-client-qt/-/wikis/Changelog#nightly-january-10
https://blog.blacklanternsecurity.com/p/Jami-Local-Denial-Of-Service-and-QRC-Handler-Vulnerabilities

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2023-3434
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3434

History

Created	Old Value	New Value	Data Type	Notes
2024-06-24 20:52:26				Added to TrackCVE