4586 matches found
CVE-2019-11070: Undefined Security Weakness
WebKitGTK and WPE WebKit prior to version 2.24.1 failed to properly apply configured HTTP proxy settings when downloading livestream video HLS, DASH, or Smooth Streaming, an error resulting in deanonymization. This issue was corrected by changing the way livestreams are downloaded...
PT-2019-4960
Name of the Vulnerable Software and Affected Versions iOS versions prior to 12.2 tvOS versions prior to 12.2 watchOS versions prior to 5.2 Safari versions prior to 12.1 iTunes versions prior to 12.9.4 for Windows iCloud for Windows versions prior to 7.11 Description The issue is related to memory...
PT-2019-4970
Name of the Vulnerable Software and Affected Versions iOS versions prior to 12.2 tvOS versions prior to 12.2 watchOS versions prior to 5.2 Safari versions prior to 12.1 iTunes versions prior to 12.9.4 for Windows iCloud for Windows versions prior to 7.11 Description The issue is related to memory...
webkit2-gtk3 -- Multiple vulnerabilities
The WebKitGTK project reports many vulnerabilities, including several arbitrary code execution vulnerabilities...
WebKitGTK+ - ThreadedCompositor Race Condition
WebKitGTK+ - ThreadedCompositor Race Condition @keyframes foo 0% opacity: 0; 100% opacity: 1; div animation-name: foo; animation-duration: 1s; animation-iteration-count: infinite; filter: saturate50%; frame = document.createElement"iframe"; setInterval = frame.remove;...
WebKitGTK+ - ThreadedCompositor Race Condition Exploit
@keyframes foo 0% opacity: 0; 100% opacity: 1; div animation-name: foo; animation-duration: 1s; animation-iteration-count: infinite; filter: saturate50%; frame = document.createElement"iframe"; setInterval = frame.remove; document.body.appendChildframe; doc = frame.contentDocument;...
WebKitGTK+ - 'ThreadedCompositor' Race Condition
@keyframes foo 0% opacity: 0; 100% opacity: 1; div animation-name: foo; animation-duration: 1s; animation-iteration-count: infinite; filter: saturate50%; frame = document.createElement"iframe"; setInterval = frame.remove; document.body.appendChildframe; doc = frame.contentDocument;...
PT-2019-2624
Name of the Vulnerable Software and Affected Versions iOS versions prior to 12.2 tvOS versions prior to 12.2 Safari versions prior to 12.1 iTunes for Windows versions prior to 12.9.4 iCloud for Windows versions prior to 7.11 WebKitGTK affected versions not specified WPE WebKit affected versions n...
PT-2019-2627
Name of the Vulnerable Software and Affected Versions iOS versions prior to 12.2 tvOS versions prior to 12.2 Safari versions prior to 12.1 iTunes versions prior to 12.9.4 for Windows iCloud for Windows versions prior to 7.11 WebKitGTK affected versions not specified WPE WebKit affected versions n...
WebKitGTK Denial of Service (CVE-2019-8375)
A denial of service vulnerability exists in WebKitGTK. Successful attack can result in a denial of service condition...
GLSA-201903-12 : WebkitGTK+: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201903-12 WebkitGTK+: Multiple vulnerabilities Multiple vulnerabilities have been discovered in WebKitGTK+. Please review the referenced CVE identifiers for details. Impact : An attacker could execute arbitrary code or conduct...
WebkitGTK+: Multiple vulnerabilities
Background WebKitGTK+ is a full-featured port of the WebKit rendering engine, suitable for projects requiring any kind of web integration, from hybrid HTML/CSS applications to full-fledged web browsers. Description Multiple vulnerabilities have been discovered in WebKitGTK+. Please review the...
WebKitGTK 2.23.90 / WebKitGTK+ 2.22.6 - Denial of Service
Exploit Title: Buffer overflow Date: 27-02-2019 Exploit Author: Dhiraj Mishra Vendor Homepage: https://webkit.org/ Software Link: https://gitlab.gnome.org/GNOME/epiphany Version: 2.23.90 Tested on: Linux 4.15.0-38-generic CVE: CVE-2019-8375 References: https://nvd.nist.gov/vuln/detail/CVE-2019-83...
WebKitGTK 2.23.90 WebKitGTK+ 2.22.6 - Denial of Service
WebKitGTK 2.23.90 WebKitGTK+ 2.22.6 - Denial of Service Exploit Title: Buffer overflow Date: 27-02-2019 Exploit Author: Dhiraj Mishra Vendor Homepage: https://webkit.org/ Software Link: https://gitlab.gnome.org/GNOME/epiphany Version: 2.23.90 Tested on: Linux 4.15.0-38-generic CVE: CVE-2019-8375...
WebKitGTK 2.23.90 / WebKitGTK+ 2.22.6 - Denial of Service Exploit
Exploit Title: Buffer overflow Exploit Author: Dhiraj Mishra Vendor Homepage: https://webkit.org/ Software Link: https://gitlab.gnome.org/GNOME/epiphany Version: 2.23.90 Tested on: Linux 4.15.0-38-generic CVE: CVE-2019-8375 References: https://nvd.nist.gov/vuln/detail/CVE-2019-8375...
CVE-2019-8375
The UIProcess subsystem in WebKit, as used in WebKitGTK through 2.23.90 and WebKitGTK+ through 2.22.6 and other products, does not prevent the script dialog size from exceeding the web view size, which allows remote attackers to cause a denial of service Buffer Overflow or possibly have unspecifi...
CVE-2019-8375
CVE-2019-8375 affects WebKit’s UIProcess subsystem used by WebKitGTK/WebKitGTK+. The vulnerability arises when the script dialog size can exceed the web view size, potentially enabling remote denial of service via a buffer overflow, with other unspecified impacts. Affected packages include WebKit...
CVE-2019-8375
The UIProcess subsystem in WebKit, as used in WebKitGTK through 2.23.90 and WebKitGTK+ through 2.22.6 and other products, does not prevent the script dialog size from exceeding the web view size, which allows remote attackers to cause a denial of service Buffer Overflow or possibly have unspecifi...
CVE-2019-8375: Improper Restriction of Operations within the Bounds of a Memory Buffer
The UIProcess subsystem in WebKit, as used in WebKitGTK through 2.23.90 and WebKitGTK+ through 2.22.6 and other products, does not prevent the script dialog size from exceeding the web view size, which allows remote attackers to cause a denial of service Buffer Overflow or possibly have unspecifi...
