SharpEmu debugger frontend lets web pages run local programs
A malicious web page can run programs on your PC through an emulator tool.
Summary
The repository-provided debugger frontend of the SharpEmu PlayStation 5 emulator accepts unauthenticated requests from web pages, so an attacker's page can run programs or control the emulated process on the victim's computer. This tool is not included in the release archives.
Affected when
- Running the repository-provided debugger frontend (not in release archives)
- Visiting a malicious web page in a browser on the same computer
What to do
Update to 0.0.3-release.3-patch.1 or later. The release archives do not include this tool, so users who did not run the repository debugger frontend are not affected.
Products and platforms
CVE IDs
Sources
- Write-up: github.com (opens in a new tab)
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen