[ASA-202004-23] webkit2gtk: arbitrary code execution

Arch Linux Security Advisory ASA-202004-23 ========================================== Severity: Critical Date : 2020-04-28 CVE-ID : CVE-2020-3899 Package : webkit2gtk Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-1144 Summary ======= The package webkit2gtk...

Updated chromium-browser-stable packages fix security vulnerabilities

Chromium-browser 81.0.4044.122 fixes security issues: Multiple flaws were found in the way Chromium 81.0.4044.92 processes various types of web content, where loading a web page containing malicious content could cause Chromium to crash, execute arbitrary code, or disclose sensitive information...

MGASA-2020-0185 Updated chromium-browser-stable packages fix security vulnerabilities

Chromium-browser 81.0.4044.122 fixes security issues: Multiple flaws were found in the way Chromium 81.0.4044.92 processes various types of web content, where loading a web page containing malicious content could cause Chromium to crash, execute arbitrary code, or disclose sensitive information...

WebKit AudioArray::allocate Data Race / Out-Of-Bounds Access Vulnerability

WebKit: Data race in AudioArray::allocate can lead to OOB access VULNERABILITY DETAILS Source/WebCore/platform/audio/AudioArray.h: void allocateChecked n ... while !isAllocationGood // Initially we try to allocate the exact size, but if it's not aligned // then we'll have to reallocate and from...

The vulnerability of the rendering module in WebKit operating systems for iOS, tvOS, the multimedia player iTunes for Windows, the browser Safari, and the iCloud for Windows service allows a perpetrator to disclose protected information.

The vulnerability of the rendering module in WebKit operating systems for iOS, tvOS, the multimedia player iTunes for Windows, the browser Safari, and the iCloud for Windows service is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to...

The vulnerability of the rendering module in WebKit operating systems for iOS, tvOS, the multimedia player iTunes for Windows, the browser Safari, and the iCloud for Windows service allows a hacker to execute arbitrary code.

The vulnerability of the rendering module in WebKit operating systems for iOS, tvOS, the multimedia player iTunes for Windows, the browser Safari, and the iCloud for Windows service is related to insufficient protection of the web page structure. Exploiting this vulnerability allows an attacker t...

[ASA-202004-17] webkit2gtk: arbitrary code execution

Arch Linux Security Advisory ASA-202004-17 ========================================== Severity: Critical Date : 2020-04-19 CVE-ID : CVE-2020-11793 Package : webkit2gtk Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-1137 Summary ======= The package webkit2gt...

MGASA-2020-0174 Updated chromium-browser-stable packages fix security vulnerabilities

Chromium-browser 81.0.4044.92 fixes security issues: Multiple flaws were found in the way Chromium 80.0.3987.149 processes various types of web content, where loading a web page containing malicious content could cause Chromium to crash, execute arbitrary code, or disclose sensitive information...

CVE-2020-11793

A use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via crafted web content that allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash...

Arbitrary Code Execution

firefox is vulnerable to arbitrary code execution. The vulnerability exists as a flaw was found in the way Firefox parsed certain web content containing "cssText". A web page containing malicious content could cause firefox to crash or, potentially, execute arbitrary code with the privileges of t...

Access Control Bypass

firefox is vulnerable to access controls restrictions bypass. A flaw was found in the way Firefox processed the "Enter" keypress event. A malicious web page could present a download dialog while the key is pressed, activating the default "Open" action. A remote attacker could exploit this...

Arbitrary Code Execution

firefox is vulneable to arbitrary code execution. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox...

Same-Origin Policy Bypass

thunderbird/firefox is vulnerable to Same-Origin Policy bypass. It was found that Thunderbird could treat two separate cookies for web content as interchangeable if both were for the same domain name but one of those domain names had a trailing "." character. This violates the same-origin policy...

Arbitrary Code Execution

firefox is vulnerable to arbitrary code execution. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox...

Arbitrary Code Execution

firefox is vulnerable to arbitrary code execution. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox...

Denial Of Service (DoS)

webkitgtk is vulnerable to denial of service DoS. The vulnerability exists through two array index errors, leading to out-of-bounds memory reads, were found in WebKit. Malicious web content could cause an application using WebKitGTK+ to crash...

Arbitrary Code Execution

webkitgtk is vulnerable to arbitrary code execution. The vulnerability exists as multiple memory corruption flaws were found in WebKit. Malicious web content could cause an application using WebKitGTK+ to crash or, potentially, execute arbitrary code with the privileges of the user running the...

Denial Of Service(DoS)

WebKitGTK+ is vulnerable to denial of service DoS. Malicious web content causes an application using WebKitGTK+ to crash or, potentially, execute arbitrary code with the privileges of the user running the application...

Denial Of Service (DoS)

WebKitGTK+ is vulnerable to denial of service DoS. Due use-after-free flaws found in WebKit, malicious web content causes an application using WebKitGTK+ to crash or, potentially, execute arbitrary code with the privileges of the user running the application...

Denial Of Service (DoS)

WebKitGTK+ is vulnerable to denial of service DoS. Due use-after-free flaws caused by vectors involving selections, malicious web content leads an application using WebKitGTK+ to crash or, potentially, execute arbitrary code with the privileges of the user running the application...