Source |
CVE Liste |
Identifiant |
8293359 |
Date de publication |
2022-12-21 09:15:07 (vue: 2022-12-21 12:07:05) |
Titre |
CVE-2022-43543 |
Texte |
KDDI +Message App, NTT DOCOMO +Message App, and SoftBank +Message App contain a vulnerability caused by improper handling of Unicode control characters. +Message App displays text unprocessed, even when control characters are contained, and the text is shown based on Unicode control character's specifications. Therefore, a crafted text may display misleading web links. As a result, a spoofed URL may be displayed and phishing attacks may be conducted. Affected products and versions are as follows: KDDI +Message App for Android prior to version 3.9.2 and +Message App for iOS prior to version 3.9.4, NTT DOCOMO +Message App for Android prior to version 54.49.0500 and +Message App for iOS prior to version 3.9.4, and SoftBank +Message App for Android prior to version 12.9.5 and +Message App for iOS prior to version 3.9.4 |
Envoyé |
Oui |
Condensat |
+message 0500 2022 43543 affected android app are attacks based caused character characters conducted contain contained control crafted cve display displayed displays docomo even follows: handling improper ios kddi links may misleading ntt phishing prior products result shown softbank specifications spoofed text therefore unicode unprocessed url version versions vulnerability web when |
Tags |
Vulnerability
Guideline
|
Stories |
|
Notes |
|
Move |
|