CVE-2018-1000006 : GitHub Electron versions 1.8.2-beta.3 and earlier, 1.7.10 and earlier, 1.6.15 an

GitHub Electron versions 1.8.2-beta.3 and earlier, 1.7.10 and earlier, 1.6.15 and earlier has a vulnerability in the protocol handler, specifically Electron apps running on Windows 10, 7 or 2008 that register custom protocol handlers can be tricked in arbitrary command execution if the user clicks on a specially crafted URL. This has been fixed in versions 1.8.2-beta.4, 1.7.11, and 1.6.16.

Published 2018-01-24 23:29:00

Updated 2018-04-01 01:29:02

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2018-1000006

Atom » Electron
Versions up to, including, (<=) 1.7.10
cpe:2.3:a:atom:electron:*:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows 10 » Version: N/A
When used together with: Microsoft » Windows 7 » Version: N/A
When used together with: Microsoft » Windows Server 2008 » Version: N/A
Atom » Electron
Versions up to, including, (<=) 1.6.15
cpe:2.3:a:atom:electron:*:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows 10 » Version: N/A
When used together with: Microsoft » Windows 7 » Version: N/A
When used together with: Microsoft » Windows Server 2008 » Version: N/A
Atom » Electron » Version: 1.8.2 Update Beta1
cpe:2.3:a:atom:electron:1.8.2:beta1:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows 10 » Version: N/A
When used together with: Microsoft » Windows 7 » Version: N/A
When used together with: Microsoft » Windows Server 2008 » Version: N/A
Atom » Electron » Version: 1.8.2 Update Beta3
cpe:2.3:a:atom:electron:1.8.2:beta3:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows 10 » Version: N/A
When used together with: Microsoft » Windows 7 » Version: N/A
When used together with: Microsoft » Windows Server 2008 » Version: N/A
Atom » Electron » Version: 1.8.2 Update Beta2
cpe:2.3:a:atom:electron:1.8.2:beta2:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows 10 » Version: N/A
When used together with: Microsoft » Windows 7 » Version: N/A
When used together with: Microsoft » Windows Server 2008 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2018-1000006

EPSS FAQ

97.03%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 100 %

Percentile, the proportion of vulnerabilities that are scored at or less

Metasploit modules for CVE-2018-1000006

Exodus Wallet (ElectronJS Framework) remote Code Execution

Disclosure Date: 2018-01-25

First seen: 2020-04-26

exploit/windows/browser/exodus

This module exploits a Remote Code Execution vulnerability in Exodus Wallet, a vulnerability in the ElectronJS Framework protocol handler can be used to get arbitrary command execution if the user clicks on a specially crafted URL. Authors: - Wflki - Daniel Tei

More information

CVSS scores for CVE-2018-1000006

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C	8.6	10.0	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete
8.8	HIGH	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	2.8	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: Required Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2018-1000006

CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2018-1000006

https://www.exploit-db.com/exploits/44357/

Exodus Wallet (ElectronJS Framework) - Remote Code Execution (Metasploit)
https://electronjs.org/blog/protocol-handler-fix

Protocol Handler Vulnerability Fix | Electron Blog
Mitigation;Third Party Advisory
https://medium.com/@Wflki/exploiting-electron-rce-in-exodus-wallet-d9e6db13c374

Exploiting Electron RCE in Exodus wallet - HackerNoon.com - Medium
Exploit;Issue Tracking;Third Party Advisory
http://www.securityfocus.com/bid/102796

Electron CVE-2018-1000006 Remote Code Execution Vulnerability
Third Party Advisory;VDB Entry
https://www.exploit-db.com/exploits/43899/

Exodus Wallet (ElectronJS Framework) - Remote Code Execution
Exploit;Third Party Advisory;VDB Entry
https://github.com/electron/electron/releases/tag/v1.8.2-beta.4

Release electron v1.8.2-beta.4 · electron/electron · GitHub
Patch;Third Party Advisory

Jump to