CVE-2008-6005: w3c amaya_web_browser
Modified
Published 28-01-2009Last modified 07-08-2024
Vulnerability summary
CVE-2008-6005 is a high (CVSS 10.0) vulnerability in w3c amaya_web_browser. EPSS estimates a 4.60% chance of exploitation in the next 30 days, higher than 91.6% of scored vulnerabilities. 1 public exploit is recorded.
CVSS score
10.0/10
010
High · v2.0 (NVD)EPSS score
4.60%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits1reference
Timeline
- 28-01-2009PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Multiple buffer overflows in the CheckUniqueName function in W3C Amaya Web Browser 10.0.1, and possibly other versions including 11.0.1, might allow remote attackers to execute arbitrary code via "duplicated" attribute value inputs.
CVSS metrics
1 score · 1 source · 1 versionHigh 10.0Preferred score · NVD (NIST)
AV:N/AC:L/Au:N/C:C/I:C/A:CSourcesSingle source
EPSS trend
Probability
4.60%
Chance of exploitation in the next 30 days
Percentile
92%
Versus all other CVEs
30-day change
No change 0.00 pp
From 4.60% on 22-09-2026
22-09-202622-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
1 foundExploit Reference (bugs.debian.org)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
W3c1 product
- amaya_web_browser10.0.1 | 11.0.1
1 vendor · 1 product
