21 matches found
EUVD-2012-3594
Malware in sbrugna...
EUVD-2015-5749
Malware in sbrugna...
EUVD-2012-0635
Malware in sbrugna...
EUVD-2014-4340
Malware in sbrugna...
EUVD-2016-6086
Malware in sbrugna...
EUVD-2010-0681
Malware in sbrugna...
EUVD-2012-3637
Malware in sbrugna...
EUVD-2010-0692
Malware in sbrugna...
EUVD-2014-1367
Malware in sbrugna...
EUVD-2012-3563
Malware in sbrugna...
EUVD-2015-5705
Malware in sbrugna...
EUVD-2015-1268
Malware in sbrugna...
EUVD-2011-0153
Malware in sbrugna...
EUVD-2011-0178
Malware in sbrugna...
WebKit JSC - 'JSArray::shiftCountWithArrayStorage' Out-of-Bounds Read/Write
/ bool JSArray::shiftCountWithArrayStorageVM& vm, unsigned startIndex, unsigned count, ArrayStorage storage unsigned oldLength = storage-length; RELEASEASSERTcount hasHoles && this-structurevm-holesMustForwardToPrototypevm, this || hasSparseMap || shouldUseSlowPutindexingType return false; if...
CVE-2017-1000121
The UNIX IPC layer in WebKit, including WebKitGTK+ prior to 2.16.3, does not properly validate message size metadata, allowing a compromised secondary process to trigger an integer overflow and subsequent buffer overflow in the UI process. This vulnerability does not affect Apple products...
WebKit: Use-after-free in JSC::B3::Procedure::resetReachability（CVE-2017-2470）
Note: It seems it doesn't crash the JSC compiled without Address Sanitizer. PoC: function for var i = 0; i 1000000; ++i const v = Array & 1 ? v : 1; typeof o = 'object'; ; Asan Log: ==32191==ERROR: AddressSanitizer: heap-use-after-free on address 0x607000099738 at pc 0x000106c7af16 bp...
CVE-2017-2454
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...
WebKit / Appl Safari / Google Chrome security vulnerabilities
Race conditions, use-after-free...
CVE-2011-1344
Use-after-free vulnerability in WebKit, as used in Apple Safari before 5.0.5; iOS before 4.3.2 for iPhone, iPod, and iPad; iOS before 4.2.7 for iPhone 4 CDMA; and possibly other products allows remote attackers to execute arbitrary code by adding children to a WBR tag and then removing the tag,...