Issue metadata
Sign in to add a comment
|
Security: Vulnerability Issue (UXSS in Comodo Dragon Browser Version 29.1.0.0)
Reported by
evan.ric...@gmail.com,
Mar 4 2016
|
||||||||||||||||||
Issue descriptionHello, I am Evan of www.evanricafort.com. A security researcher from the Philippines. I found out that Comodo Dragon Browser Version 29.1.0.0 is vulnerable to Universal Cross Site Scripting (UXSS). Reference of UXSS (http://ceukelai.re/a-tale-of-two-offline-chrome-uxss-vulns/) Proof of Concept Check attached file. I hope you will fix this issue. This issue was already reported to Comodo Security Team and their response was this: check attached file Best Regards, Evan of Invalid Web Security
,
Mar 4 2016
Comodo Dragon Security Team Response: Dear Customer, Welcome Back to COMODO! We apologize for the Inconvenience, Mentioned issue investigated by Developers , they informed its a Chromium based bug. This bug also reproducible for Google Chrome or any other chromium based browsers. Fixed at chromium v.47, therefore its fixed at also v.47 for both Comodo Dragon and Google Chrome. Comodo Dragon v.47 was not released. Our developers advised to wait until COMODO V.48 been released. Should you have any queries do not hesitate to write to us. Thanks and Regards, Ralph GeekBuddy Technical Support www.comodo.com Ticket Details --------------------------------- Ticket ID: EGE-125-50265 Department: Comodo Dragon Type: Issue Status: Awaiting Reply Priority: Default
,
Mar 4 2016
Hi Evan, Thanks for reporting this issue. According to Comodo Dragon's reply, this vulnerability was fixed in Chrome V47 (The latest version is V48). Let us know if this issue still can be reproduced on the latest version of chrome. Cheers,
,
Mar 4 2016
I didn't test this issue on the latest version of Comodo but I think this was already fixed for the latest version for both comodo and chrome, but how about this old versions?
,
Jun 10 2016
This bug has been closed for more than 14 weeks. Removing security view restrictions. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
Oct 1 2016
This bug has been closed for more than 14 weeks. Removing security view restrictions. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
Oct 2 2016
This bug has been closed for more than 14 weeks. Removing security view restrictions. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
Oct 2 2016
|
|||||||||||||||||||
►
Sign in to add a comment |
|||||||||||||||||||
Comment 1 by evan.ric...@gmail.com
, Mar 4 2016