Design/Logic Flaw

2017-03-0115:59:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

49.9%

JSON

Yandex Browser for desktop before 17.1.1.227 does not show Protect (similar to Safebrowsing in Chromium) warnings in web-sites with special content-type, which could be used by remote attacker for prevention Protect warning on own malicious web-site.

CPENameOperatorVersion
yandex_browserlt17.1.1.227

CPE	Name	Operator	Version
	yandex_browser	lt	17.1.1.227

References

www.securityfocus.com/bid/96514

yandex.com/blog/security-changelogs/fixed-in-version-17-1