KLA10893
Multiple vulnerabilities in Yandex browser

Aktualisiert: 03/29/2019

Erkennungsdatum ?	10/26/2016
Schweregrad ?	Alarmierend
Beschreibung	Multiple serious vulnerabilities have been found in Yandex Browser. Malicious users can exploit these vulnerabilities to inject arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities Cross-site scripting vulnerabilities at Translator and BookReader can be exploited to inject arbitrary JavaScript code; CSRF vulnerability at synchronization form can be exploited to obtain sensitive information; An unknown vulnerability at Anti-phishing warning can be exploited remotely to brute-force passwords via injected JavaScript; An unknown vulnerability at Security WiFi can be exploited remotely to obtain sensitive information. Technical details Vulnerability (2) can be exploited to steal data saved in browser profile. Vulnerability (4) can be exploited to sniff traffic from open or protected wi-fi networks.
Beeinträchtigte Produkte	Yandex Browser versions earlier than 16.9 excluding version 16.7
Lösung	Update to the latest version Get Yandex Browser
Ursprüngliche Informationshinweise	Yandex Browser changelogs
Folgen ?	OSI [?] CI [?]
CVE-IDS ?	CVE-2016-85064.3Warning CVE-2016-85054.3Warning CVE-2016-85044.3Warning CVE-2016-85035.0Warning CVE-2016-85025.0Warning CVE-2016-85015.0Warning
	Link zum Original
	Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken

KLA10893Multiple vulnerabilities in Yandex browser