CVE-2018-1000006

GitHub Electron versions 1.8.2-beta.3 and earlier, 1.7.10 and earlier, 1.6.15 and earlier has a vulnerability in the protocol handler, specifically Electron apps running on Windows 10, 7 or 2008 that register custom protocol handlers can be tricked in arbitrary command execution if the user clicks on a specially crafted URL. This has been fixed in versions 1.8.2-beta.4, 1.7.11, and 1.6.16.

CVSS v3.0

8.8 HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v3.0

8.8 HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2.0

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

84.50% chance of exploitation in the next 30 days, 100th percentile

Published

2018-01-24

Updated

2024-08-05

Proof-of-concept exploits (1)

• CHYbeta/CVE-2018-1000006-DEMO39★ · 2018-01-25

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/exodus.rb

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/44357
• https://www.exploit-db.com/exploits/43899

Vulhub environments (1)

• vulhub/vulhub/tree/master/electron/CVE-2018-1000006

Exploit collections (1)

• helloexp/0day/tree/master/100-%E5%90%84%E7%A7%8DCMS/Electron/CVE-2018-1000006

References

• CVE Record
• NVD entry

Related

• CVE-2017-11427
• CVE-2018-11235
• CVE-2018-1000001
• CVE-2018-1000030
• CVE-2018-0986
• CVE-2018-1000049