WebKitGTK+ and WPE WebKit Integer Overflow Vulnerability

WebKitGTK+ is a full-featured port of the WebKit rendering engine.WPE WebKit is a port of WebKit optimized for embedded platforms.WebKit is a typography engine used to allow web browsers to draw web pages. An integer overflow vulnerability exists in the getImageData function in the ImageBufferCai...

UBUNTU-CVE-2018-11712

WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ versions 2.20.0 and 2.20.1, failed to perform TLS certificate verification for WebSocket connections...

USN-3640-1 webkit2gtk vulnerability

Ivan Fratric discovered that WebKitGTK+ incorrectly handled certain web content. If a user were tricked into viewing a malicious website, a remote attacker could possibly exploit this to execute arbitrary code...

The vulnerability in the IPC::Connection::processMessage function of UNIX IPC kernels for display pages in WebKitGTK+ allows a attacker to trigger a buffer overflow.

The vulnerability of the IPC::Connection::processMessage function in UNIX IPC kernel and WebKitGTK+ web pages is caused by improper checking of message sizes. Exploiting this vulnerability can allow a malicious actor to trigger buffer overflows in user interface processes remotely...

webkit2-gtk3 -- multiple vulnerabilities

The Webkit gtk team reports: Please reference CVE/URL list for details...

GLSA-201612-41 : WebKitGTK+: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201612-41 WebKitGTK+: Multiple vulnerabilities Multiple vulnerabilities have been discovered in WebKitGTK+. Please review the CVE identifiers referenced below for details. Impact : A remote attacker can use multiple vectors to...

FreeBSD : WebKit-gtk -- Multiple vulnerabilities (e9ccdb28-9802-11e4-9d9c-bcaec565249c)

Webkit release team reports : This release fixes the following security issues : CVE-2014-1344, CVE-2014-1384, CVE-2014-1385, CVE-2014-1386, CVE-2014-1387, CVE-2014-1388, CVE-2014-1389, CVE-2014-1390. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

WebKit-gtk -- Multiple vulnerabilities

Webkit release team reports: This release fixes the following security issues: CVE-2014-1344, CVE-2014-1384, CVE-2014-1385, CVE-2014-1386, CVE-2014-1387, CVE-2014-1388, CVE-2014-1389, CVE-2014-1390...

Fedora Update for uzbl FEDORA-2012-2321

Check for the Version of uzbl OpenVAS Vulnerability Test Fedora Update for uzbl FEDORA-2012-2321 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for uzbl FEDORA-2012-2384

Check for the Version of uzbl OpenVAS Vulnerability Test Fedora Update for uzbl FEDORA-2012-2384 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for uzbl FEDORA-2012-2364

Check for the Version of uzbl OpenVAS Vulnerability Test Fedora Update for uzbl FEDORA-2012-2364 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

[SECURITY] Fedora 16 Update: uzbl-0-0.28.20111001git9576f59f05.fc16

Uzbl is a lightweight web browser based on WebKit/Gtk+. Uzbl follows the UNIX philosophy - "Write programs that do one thing and do it well. Write programs to work together. Write programs to handle text streams, because that is a universal interface."...

[SECURITY] Fedora 17 Update: uzbl-0-0.28.20111001git9576f59f05.fc17

Uzbl is a lightweight web browser based on WebKit/Gtk+. Uzbl follows the UNIX philosophy - "Write programs that do one thing and do it well. Write programs to work together. Write programs to handle text streams, because that is a universal interface."...

webkit: Integer overflow in WebKit's handling of Text objects

Integer overflow in the Text::wholeText method in dom/Text.cpp in WebKit, as used in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4; webkitgtk before 1.2.6; and possibly other products allows remote attackers to execute arbitrary code or cau...

WebKit: multiple vulnerabilities in WebKitGTK

WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a floating element in an SVG...

WebKit: multiple vulnerabilities in WebKitGTK

WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; does not properly handle just-in-time JIT compiled JavaScript stubs, which allows remote attackers to execute arbitrary code or cause a denial of service...

Fedora Update for uzbl FEDORA-2010-12276

Check for the Version of uzbl OpenVAS Vulnerability Test Fedora Update for uzbl FEDORA-2010-12276 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Fedora Update for uzbl FEDORA-2010-12260

Check for the Version of uzbl OpenVAS Vulnerability Test Fedora Update for uzbl FEDORA-2010-12260 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

[SECURITY] Fedora 13 Update: uzbl-0-0.16.20100626gitafc0f873e.fc13

Uzbl is a lightweight web browser based on WebKit/Gtk+. Uzbl follows the UNIX philosophy - "Write programs that do one thing and do it well. Write programs to work together. Write programs to handle text streams, because that is a universal interface."...

[SECURITY] Fedora 12 Update: uzbl-0-0.16.20100626gitafc0f873e.fc12

Uzbl is a lightweight web browser based on WebKit/Gtk+. Uzbl follows the UNIX philosophy - "Write programs that do one thing and do it well. Write programs to work together. Write programs to handle text streams, because that is a universal interface."...