macOS/iOS - JavaScript Injection Bug in OfficeImporter

QuickLook is a widely used feature in macOS/iOS which allows you to preview various formats such as pdf, docx, pptx, etc. The way it uses to show office files is quite interesting. First it parses the office file and converts it to HTML code using OfficeImport and renders it using WebKit. The...

Apple iOS Arbitrary Code Execution Vulnerability (CNVD-2018-14963)

iOS is a mobile operating system developed by Apple Inc. An arbitrary code execution vulnerability exists in Apple iOS due to a memory handling error in the WebKit component, which can be exploited by an attacker to execute arbitrary code on the target system...

Apple iOS Information Disclosure Vulnerability (CNVD-2018-14968)

iOS is a mobile operating system developed by Apple Inc. Apple iOS suffers from an information disclosure vulnerability due to a cross-origin access error in the WebKit component that can be exploited by an attacker to obtain audio data...

Apple iOS Denial of Service Vulnerability (CNVD-2018-14962)

iOS is a mobile operating system developed by Apple Inc. Apple iOS suffers from a denial of service vulnerability due to a race condition in the WebKit component that can be exploited by an attacker to cause a denial of service condition...

About the security content of Safari 11.1.2

About the security content of Safari 11.1.2 This document describes the security content of Safari 11.1.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

About the security content of iCloud for Windows 7.6

About the security content of iCloud for Windows 7.6 This document describes the security content of iCloud for Windows 7.6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

About the security content of iOS 11.4.1

About the security content of iOS 11.4.1 This document describes the security content of iOS 11.4.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

[SECURITY] Fedora 27 Update: chromium-67.0.3396.79-1.fc27

Chromium is an open-source web browser, powered by WebKit Blink...

WebKitGTK+ and WPE WebKit Integer Overflow Vulnerability

WebKitGTK+ is a full-featured port of the WebKit rendering engine.WPE WebKit is a port of WebKit optimized for embedded platforms.WebKit is a typography engine used to allow web browsers to draw web pages. An integer overflow vulnerability exists in the getImageData function in the ImageBufferCai...

DEBIAN-CVE-2018-12294

WebCore/platform/graphics/texmap/TextureMapperLayer.cpp in WebKit, as used in WebKitGTK+ prior to version 2.20.2, is vulnerable to a use after free for a WebCore::TextureMapperLayer object...

Integer overflow

The getImageData function in the ImageBufferCairo class in WebCore/platform/graphics/cairo/ImageBufferCairo.cpp in WebKit, as used in WebKitGTK+ prior to version 2.20.3 and WPE WebKit prior to version 2.20.1, is vulnerable to a heap-based buffer overflow triggered by an integer overflow, which...

CVE-2018-12293

The getImageData function in the ImageBufferCairo class in WebCore/platform/graphics/cairo/ImageBufferCairo.cpp in WebKit, as used in WebKitGTK+ prior to version 2.20.3 and WPE WebKit prior to version 2.20.1, is vulnerable to a heap-based buffer overflow triggered by an integer overflow, which...

CVE-2018-12294

WebCore/platform/graphics/texmap/TextureMapperLayer.cpp in WebKit, as used in WebKitGTK+ prior to version 2.20.2, is vulnerable to a use after free for a WebCore::TextureMapperLayer object...

DEBIAN-CVE-2018-12293

The getImageData function in the ImageBufferCairo class in WebCore/platform/graphics/cairo/ImageBufferCairo.cpp in WebKit, as used in WebKitGTK+ prior to version 2.20.3 and WPE WebKit prior to version 2.20.1, is vulnerable to a heap-based buffer overflow triggered by an integer overflow, which...

CVE-2018-12293

The getImageData function in the ImageBufferCairo class in WebCore/platform/graphics/cairo/ImageBufferCairo.cpp in WebKit, as used in WebKitGTK+ prior to version 2.20.3 and WPE WebKit prior to version 2.20.1, is vulnerable to a heap-based buffer overflow triggered by an integer overflow, which...

CVE-2018-12293

The getImageData function in the ImageBufferCairo class in WebCore/platform/graphics/cairo/ImageBufferCairo.cpp in WebKit, as used in WebKitGTK+ prior to version 2.20.3 and WPE WebKit prior to version 2.20.1, is vulnerable to a heap-based buffer overflow triggered by an integer overflow, which...

CVE-2018-12293

CVE-2018-12293 affects WebKitGTK+ and WPE WebKit: getImageData in ImageBufferCairo.cpp can overflow a heap due to integer overflow when computing image data size. Affected versions: WebKitGTK+ < 2.20.3 and WPE WebKit

CVE-2018-12294

CVE-2018-12294 affects WebKitGTK+ (WebKitGTK+ prior to 2.20.2) where WebCore/TextureMapperLayer.cpp (TextureMapperLayer) is vulnerable to a use-after-free of WebCore::TextureMapperLayer. The connected sources consistently describe a WebKitGTK+ memory-use-after-free vulnerability; no vendor/produc...

CVE-2018-12294

WebCore/platform/graphics/texmap/TextureMapperLayer.cpp in WebKit, as used in WebKitGTK+ prior to version 2.20.2, is vulnerable to a use after free for a WebCore::TextureMapperLayer object...

CVE-2018-12293

The getImageData function in the ImageBufferCairo class in WebCore/platform/graphics/cairo/ImageBufferCairo.cpp in WebKit, as used in WebKitGTK+ prior to version 2.20.3 and WPE WebKit prior to version 2.20.1, is vulnerable to a heap-based buffer overflow triggered by an integer overflow, which...