JVN#25448394 Sleipnir and Grani vulnerable to arbitrary script execution when Bookmark search results are restored from history

Sleipnir and Grani, web browsers from Fenrir & Co., have a bookmark search function. When a user runs the search function, the search result is displayed in the web browser. If a specially crafted string is used in a search, an arbitrary script may be executed on the user’s web browser when the search results are restored from history.

Impact

An arbitrary script may be executed in the user’s web browser.

Solution

Update the Software
Apply the latest updates provided by Fenrir & Co.

Products Affected

• Sleipnir 2.7.1 Release2 and earlier
• Portable Sleipnir 2.7.1 Release2 and earlier
• Grani 3.1 and earlier