CVE-2019-8375

CRITICAL 9.8CVE-2019-8375 · Published 24/02/2019 · updated 17/06/2026

Package	Affected versions	Patched versions
webkitgtk webkitgtk	`≤ 2.23.90`	No fix yet
webkitgtk+ webkitgtk	`≤ 2.22.6`	No fix yet

Description

The UIProcess subsystem in WebKit, as used in WebKitGTK through 2.23.90 and WebKitGTK+ through 2.22.6 and other products, does not prevent the script dialog size from exceeding the web view size, which allows remote attackers to cause a denial of service (Buffer Overflow) or possibly have unspecified other impact, related to UIProcess/API/gtk/WebKitScriptDialogGtk.cpp, UIProcess/API/gtk/WebKitScriptDialogImpl.cpp, and UIProcess/API/gtk/WebKitWebViewGtk.cpp, as demonstrated by GNOME Web (aka Epiphany).

References

lists.opensuse.org/opensuse-security-announce/2019-04/msg00058.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2019-05/msg00005.html · Mailing List
bugs.webkit.org/show_bug.cgi · Issue Tracking
WebKit/webkit commit 6f9b511 · Patch
trac.webkit.org/changeset/241515/webkit · Patch
usn.ubuntu.com/3948-1 · Third Party Advisory
exploit-db.com/exploits/46465 · Exploit
inputzero.io/2019/02/fuzzing-webkit.html · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free