CVE-2018-1000006

Description

Remote Code Execution in electron

Predictions

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

References

• https://nvd.nist.gov/vuln/detail/CVE-2018-1000006
• https://electronjs.org/blog/protocol-handler-fix
• https://github.com/advisories/GHSA-w222-53c6-c86p
• https://github.com/electron/electron/releases/tag/v1.8.2-beta.4
• https://medium.com/@Wflki/exploiting-electron-rce-in-exodus-wallet-d9e6db13c374
• https://www.exploit-db.com/exploits/43899
• https://www.exploit-db.com/exploits/44357
• https://www.npmjs.com/advisories/563
• http://www.securityfocus.com/bid/102796