TI-2024-23424 CVE-2024-35420 · GHSA-xj4x-m269-rcgc
wac commit 385e1 was discovered to contain a heap overflow.
Priority MEDIUM 61
wac commit 385e1 was discovered to contain a heap overflow.
5 records
wac commit 385e1 was discovered to contain a heap overflow.
wac commit 385e1 was discovered to contain a heap overflow via the load_module function at /wac-asan/wa.c.
wac commit 385e1 was discovered to contain a heap overflow via the setup_call function at /wac-asan/wa.c.
wac commit 385e1 was discovered to contain a heap overflow via the interpret function at /wac-asan/wa.c.
noVNC before 0.5 does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.