The image decoder in WebKit before r52833, as used in Google Chrome before
4.0.249.78, does not properly handle a failure of memory allocation, which
allows remote attackers to execute arbitrary code in the Chrome sandbox via
a malformed GIF file that specifies a large size.
Author | Note |
---|---|
jdstrand | qt4-x11 unmaintained upstream (see README.webkit for details) webkit is a fork of khtml from kdelibs. kdelibs5 is farther from it, while qt4-x11 attempts to unify khtml and webkit. |
mdeslaur | webkitkde is a wrapper around qt4-x11’s webkit. this is chromium-specific |