EUVD-2020-6211

Malware in sbrugna...

CVE-2020-14049

Viber for Windows up to 13.2.0.39 does not properly quote its custom URI handler. A malicious website could launch Viber with arbitrary parameters, forcing a victim to send an NTLM authentication request, and either relay the request or capture the hash for offline password cracking. NOTE: this...

Cross site request forgery (csrf)

Viber for Windows up to 13.2.0.39 does not properly quote its custom URI handler. A malicious website could launch Viber with arbitrary parameters, forcing a victim to send an NTLM authentication request, and either relay the request or capture the hash for offline password cracking. NOTE: this...

CVE-2020-14049: Improper Neutralization of Argument Delimiters in a Command

Viber for Windows up to 13.2.0.39 does not properly quote its custom URI handler. A malicious website could launch Viber with arbitrary parameters, forcing a victim to send an NTLM authentication request, and either relay the request or capture the hash for offline password cracking. NOTE: this...

PT-2020-13864

Name of the Vulnerable Software and Affected Versions Viber for Windows versions up to 13.2.0.39 Description The issue arises from Viber for Windows not properly quoting its custom URI handler, allowing a malicious website to launch Viber with arbitrary parameters. This could force a victim to se...