Lucene search
PRIOn knowledge basePRION:CVE-2016-10694HistoryJun 04, 2018 - 4:29 p.m.
Remote code execution
2018-06-0416:29:00
PRIOn knowledge base
www.prio-n.com
3
alto-saxophone is a module to install and launch Chromedriver for Mac, Linux or Windows. alto-saxophone versions below 2.25.1 download binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.
| CPE | Name | Operator | Version |
|---|---|---|---|
| alto-saxophone | lt | 2.25.1 |
References
Related
osv
osv
Downloads Resources over HTTP in alto-saxophone
2018-07-31 22:34:45
CVE-2016-10694
2018-06-04 16:29:02
github
github
Downloads Resources over HTTP in alto-saxophone
2018-07-31 22:34:45
nvd
nvd
CVE-2016-10694
2018-06-04 16:29:02
cve
cve
CVE-2016-10694
2018-06-04 16:29:02
nodejs
nodejs
Downloads Resources over HTTP
2016-11-30 21:56:24
veracode
veracode
Man-in-the-Middle (MitM)
2017-01-03 07:04:59
cvelist
cvelist
CVE-2016-10694
2018-04-26 00:00:00