CVE-2015-7264
CriticalSummary
The SPDY/2 codec in Facebook Proxygen before 2015-11-09 truncates a certain field to two bytes, which allows hijacking and injection attacks.
Risk Assessment
An attacker could exploit this vulnerability to hijack user sessions or inject malicious code, posing a serious threat to data security.
Recommendation
It is recommended to update Facebook Proxygen to a version after 2015-11-09 to mitigate this vulnerability.
Other vulnerabilities in Facebook Proxygen
See all- CVE-2015-7265High
Facebook Proxygen before 2015-11-09 mismanages HTTPMessage.request state, allowing remote attackers to conduct hijacking attacks and bypass ACL checks.
- CVE-2015-7263High
The SPDY/2 codec in Facebook Proxygen before 2015-11-09 allows remote attackers to conduct hijacking attacks and bypass ACL checks via a crafted host value.
Original NVD description (English source)
The SPDY/2 codec in Facebook Proxygen before 2015-11-09 truncates a certain field to two bytes, which allows hijacking and injection attacks.