Description

A Security Feature Bypass vulnerability exists in MSR JavaScript Cryptography Library that is caused by incorrect arithmetic computations, aka "MSR JavaScript Cryptography Library Security Feature Bypass Vulnerability." This affects Microsoft Research JavaScript Cryptography Library.

Remediation

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8319

http://www.securitytracker.com/id/1041268

http://www.securityfocus.com/bid/104655

Related Vulnerabilities

CVE-2013-2160 Vulnerability in maven package org.apache.cxf:cxf-parent

CVE-2022-34169 Vulnerability in maven package xalan:xalan

CVE-2023-44402 Vulnerability in npm package electron

CVE-2021-23353 Vulnerability in maven package org.webjars.bowergithub.mrrio:jspdf

CVE-2022-35143 Vulnerability in npm package raneto

Severity

Critical

Classification

CWE-682 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Patch Vendor Advisory Third Party Advisory VDB Entry