14218 matches found
Safari Browser: Builtin JavaScript allows Function.caller to be used in strict mode(CVE-2017-2446)
If a builtin script in webkit is in strict mode, but then calls a function that is not strict, this function is allowed to call the Function. caller and can obtain a reference to the strict function. This is inconsistent with the behavior when executing non-builtin scripts in Safari, and the...
About the security content of iCloud for Windows 6.2
About the security content of iCloud for Windows 6.2 This document describes the security content of iCloud for Windows 6.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...
Safari Browser: Out-of-bounds read when calling bound function(CVE-2017-2447)
There is an out-of-bounds read when reading the bound arguments array of a bound function. When Function.bind is called, the arguments to the call are transferred to an Array before they are passed to JSBoundFunction::JSBoundFunction. Since it is possible that the Array prototype has had a setter...
Apple Safari - Out-of-Bounds Read when Calling Bound Function
Apple Safari - Out-of-Bounds Read when Calling Bound Function var ba; function s alert"in s"; ba = this; function g alert"in g"; return...
About the security content of Safari 10.1
About the security content of Safari 10.1 This document describes the security content of Safari 10.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
Apple Safari - Builtin JavaScript Allows Function.caller to be Used in Strict Mode
var q; function g //print"in g"; //printarguments.caller; //printg.caller; q = g.caller; //printg.caller; return 7; var a = 1, 2, 3; Object.defineProperty Array.prototype, "1", get : g ; var a = 1, 2, 3; a.length = 4; Object.definePropertyArray.pro...
Apple Safari - Builtin JavaScript Allows Function.caller to be Used in Strict Mode
Apple Safari - Builtin JavaScript Allows Function.caller to be Used in Strict Mode var q; function g //print"in g"; //printarguments.caller; //printg.caller; q = g.caller; //printg.caller; return 7; var a = 1, 2, 3; Object.defineProperty Array.prototype, "...
Apple Safari - Out-of-Bounds Read when Calling Bound Function
var ba; function s alert"in s"; ba = this; function g alert"in g"; return 7; function dummy alert"just a function"; alert...
About the security content of iTunes 12.6 for Windows
About the security content of iTunes 12.6 for Windows This document describes the security content of iTunes 12.6 for Windows. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...
The vulnerability of the multimedia player iTunes, the browser Safari, and the operating system iOS allows a perpetrator to trigger a service failure or execute arbitrary code.
The vulnerability of the WebKit component in multimedia players like iTunes, Safari browsers, and the iOS operating system arises from an operation that goes beyond buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service...
Important: Red Hat Security Advisory: chromium-browser security update
An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...
WebKit memory corruption vulnerability(CVE-2016-4657 )
Can be used for: CVE-2016-4657 Nintendo Switch Node Server Quick node.js server for the WebKit exploit. The virus can be modified in exploit.js Installing and Running cd npm i sudo node server.js Server runs on port 80 needs root unless specified otherwise. Route conntest.nintendowifi.net to your...
Nintendo Switch - WebKit Code Execution (PoC)
CVE-2016-4657 Switch PoC body font-size: 2em; a text-decoration: none; color: 000; a:hover color: f00; font-weight: bold; CVE-2016-4657 Nintendo Switch PoC go! reload waiting... click go. // display JS errors as alerts. Helps debugging. window.onerror = functionerror, url, line alerterror+'...
Nintendo Switch - WebKit Code Execution (PoC)
Nintendo Switch - WebKit Code Execution PoC CVE-2016-4657 Switch PoC body font-size: 2em; a text-decoration: none; color: 000; a:hover color: f00; font-weight: bold; CVE-2016-4657 Nintendo Switch PoC go! reload waiting... click go. // display JS errors as alerts. Helps debugging. window.onerror =...
The vulnerability of the iOS operating system, the multimedia player iTunes, and the web browser Safari allows attackers to obtain confidential information.
The vulnerability of the WebKit component of the iOS operating system, the multimedia player iTunes, and the browser Safari is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain confidential information...
The vulnerability of the iOS operating system, the multimedia player iTunes, and the web browser Safari allows a perpetrator to trigger a service failure or execute arbitrary code.
The vulnerability of the WebKit component of the iOS operating system, the multimedia player iTunes, and the web browser Safari arises from an operation that goes beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a servic...
The vulnerabilities of the Safari browser, the multimedia player iTunes, and the operating system iOS allow attackers to execute arbitrary code or trigger a service denial.
The vulnerability of the WebKit component in the Safari browser, the iTunes multimedia player, and the iOS operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a servic...
The vulnerabilities of the Safari browser, the multimedia player iTunes, and the operating system iOS allow a perpetrator to execute arbitrary code or trigger a service failure.
The vulnerability of the WebKit component in the Safari browser, the iTunes multimedia player, and the iOS operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a servic...
The vulnerability of the iOS operating system, the multimedia player iTunes, and the web browser Safari allows attackers to obtain confidential information.
The vulnerability of the WebKit component of the iOS operating system, the multimedia player iTunes, and the browser Safari is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to obtain confidential information through a specially creat...
The vulnerability of the iOS operating system, the multimedia player iTunes, and the web browser Safari allows a perpetrator to trigger a service failure or execute arbitrary code.
The vulnerability of the WebKit component of the iOS operating system, the multimedia player iTunes, and the web browser Safari arises from an operation that goes beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failu...