1. CVE-Search
  2. CVE-2019-11419
ID CVE-2019-11419
Summary vcodec2_hls_filter in libvoipCodec_v7a.so in the WeChat application through 7.0.3 for Android allows attackers to cause a denial of service (application crash) by replacing an emoji file (under the /sdcard/tencent/MicroMsg directory) with a crafted .wxgf file. The content of the replacement must be derived from the phone's IMEI. The crash occurs upon receiving a message that contains the replaced emoji.
References
Vulnerable Configurations
  • cpe:2.3:a:tencent:wechat:6.3.18:*:*:*:*:android:*:*
    cpe:2.3:a:tencent:wechat:6.3.18:*:*:*:*:android:*:*
  • cpe:2.3:a:tencent:wechat:6.3.22:*:*:*:*:android:*:*
    cpe:2.3:a:tencent:wechat:6.3.22:*:*:*:*:android:*:*
  • cpe:2.3:a:tencent:wechat:6.3.23:*:*:*:*:android:*:*
    cpe:2.3:a:tencent:wechat:6.3.23:*:*:*:*:android:*:*
  • cpe:2.3:a:tencent:wechat:6.3.25:*:*:*:*:android:*:*
    cpe:2.3:a:tencent:wechat:6.3.25:*:*:*:*:android:*:*
  • cpe:2.3:a:tencent:wechat:6.3.28:*:*:*:*:android:*:*
    cpe:2.3:a:tencent:wechat:6.3.28:*:*:*:*:android:*:*
  • cpe:2.3:a:tencent:wechat:6.3.31:*:*:*:*:android:*:*
    cpe:2.3:a:tencent:wechat:6.3.31:*:*:*:*:android:*:*
  • cpe:2.3:a:tencent:wechat:6.3.32:*:*:*:*:android:*:*
    cpe:2.3:a:tencent:wechat:6.3.32:*:*:*:*:android:*:*
  • cpe:2.3:a:tencent:wechat:6.5.3:*:*:*:*:android:*:*
    cpe:2.3:a:tencent:wechat:6.5.3:*:*:*:*:android:*:*
  • cpe:2.3:a:tencent:wechat:6.5.4:*:*:*:*:android:*:*
    cpe:2.3:a:tencent:wechat:6.5.4:*:*:*:*:android:*:*
  • cpe:2.3:a:tencent:wechat:6.5.7:*:*:*:*:android:*:*
    cpe:2.3:a:tencent:wechat:6.5.7:*:*:*:*:android:*:*
  • cpe:2.3:a:tencent:wechat:6.5.8:*:*:*:*:android:*:*
    cpe:2.3:a:tencent:wechat:6.5.8:*:*:*:*:android:*:*
  • cpe:2.3:a:tencent:wechat:6.5.10:*:*:*:*:android:*:*
    cpe:2.3:a:tencent:wechat:6.5.10:*:*:*:*:android:*:*
  • cpe:2.3:a:tencent:wechat:6.5.13:*:*:*:*:android:*:*
    cpe:2.3:a:tencent:wechat:6.5.13:*:*:*:*:android:*:*
  • cpe:2.3:a:tencent:wechat:6.5.16:*:*:*:*:android:*:*
    cpe:2.3:a:tencent:wechat:6.5.16:*:*:*:*:android:*:*
  • cpe:2.3:a:tencent:wechat:6.5.23:*:*:*:*:android:*:*
    cpe:2.3:a:tencent:wechat:6.5.23:*:*:*:*:android:*:*
  • cpe:2.3:a:tencent:wechat:6.6.1:*:*:*:*:android:*:*
    cpe:2.3:a:tencent:wechat:6.6.1:*:*:*:*:android:*:*
  • cpe:2.3:a:tencent:wechat:6.6.2:*:*:*:*:android:*:*
    cpe:2.3:a:tencent:wechat:6.6.2:*:*:*:*:android:*:*
  • cpe:2.3:a:tencent:wechat:6.6.6:*:*:*:*:android:*:*
    cpe:2.3:a:tencent:wechat:6.6.6:*:*:*:*:android:*:*
  • cpe:2.3:a:tencent:wechat:6.6.7:*:*:*:*:android:*:*
    cpe:2.3:a:tencent:wechat:6.6.7:*:*:*:*:android:*:*
  • cpe:2.3:a:tencent:wechat:6.7.3:*:*:*:*:android:*:*
    cpe:2.3:a:tencent:wechat:6.7.3:*:*:*:*:android:*:*
  • cpe:2.3:a:tencent:wechat:7.0.0:*:*:*:*:android:*:*
    cpe:2.3:a:tencent:wechat:7.0.0:*:*:*:*:android:*:*
  • cpe:2.3:a:tencent:wechat:7.0.3:*:*:*:*:android:*:*
    cpe:2.3:a:tencent:wechat:7.0.3:*:*:*:*:android:*:*
CVSS
Base: 4.3 (as of 01-03-2023 - 15:29)
Impact:
Exploitability:
CWE CWE-476
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:M/Au:N/C:N/I:N/A:P
refmap via4
exploit-db 46853
misc
Last major update 01-03-2023 - 15:29
Published 14-05-2019 - 19:29
Last modified 01-03-2023 - 15:29
Back to Top