0.0.0.0 Browser vulnerability - Containment

Vulnerability Advisories

A critical 18-year-old vulnerability, known as “0.0.0.0 Day,” has been identified in major web browsers including Chromium, Firefox, and Safari. This flaw enables attackers to bypass browser security and access local network services, posing a significant risk of unauthorized access and remote code execution.
The vulnerability exploits the IP address 0.0.0.0, which is improperly handled by browsers, allowing attackers to perform malicious actions. Browser vendors are currently developing fixes to address this issue.
Affected Browsers:
• Google Chrome (up to version 128)
• Mozilla Firefox
• Apple Safari
Note: It does not affect Windows devices as Microsoft blocks the IP address at the operating system level
The vulnerability may impact Ross Video product versions due to an included browser or an OS containing the affected browser.

0.0.0.0 Day Browser-Vulnerability Incident Response Advisory.pdf (90.2 KB)