Description
A Denial of Service issue has been discovered in the Gecko component of KaiOS 2.5 10.05 (platform 48.0.a2) on Nokia 8810 4G devices. When a crafted web page is visited with the internal browser, the Gecko process crashes with a segfault. Successful exploitation could lead to the remote code execution on the device.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://seclists.org/fulldisclosure/2019/Feb/35 ↗
- http://packetstormsecurity.com/files/151651/Nokia-8810-Denial-Of-Service.html ↗
- http://www.breakthesec.com/search/label/0day ↗
- https://s3curityb3ast.github.io ↗
- http://www.breakthesec.com ↗
- https://s3curityb3ast.github.io/KSA-Dev-007.md ↗
- https://developer.kaiostech.com/bugzilla-reports/report_58204.html ↗
- https://developer.kaiostech.com/bugzilla-reports/report_141873.html ↗