One Article Review

Accueil - L'article:
Source CVE.webp CVE Liste
Identifiant 8293359
Date de publication 2022-12-21 09:15:07 (vue: 2022-12-21 12:07:05)
Titre CVE-2022-43543
Texte KDDI +Message App, NTT DOCOMO +Message App, and SoftBank +Message App contain a vulnerability caused by improper handling of Unicode control characters. +Message App displays text unprocessed, even when control characters are contained, and the text is shown based on Unicode control character's specifications. Therefore, a crafted text may display misleading web links. As a result, a spoofed URL may be displayed and phishing attacks may be conducted. Affected products and versions are as follows: KDDI +Message App for Android prior to version 3.9.2 and +Message App for iOS prior to version 3.9.4, NTT DOCOMO +Message App for Android prior to version 54.49.0500 and +Message App for iOS prior to version 3.9.4, and SoftBank +Message App for Android prior to version 12.9.5 and +Message App for iOS prior to version 3.9.4
Envoyé Oui
Condensat +message 0500 2022 43543 affected android app are attacks based caused character characters conducted contain contained control crafted cve display displayed displays docomo even follows: handling improper ios kddi links may misleading ntt phishing prior products result shown softbank specifications spoofed text therefore unicode unprocessed url version versions vulnerability web when
Tags Vulnerability Guideline
Stories
Notes
Move


L'article ne semble pas avoir été repris aprés sa publication.


L'article ne semble pas avoir été repris sur un précédent.
My email: