CVE-2018-12294

概要

参考情報

• packetstormsecurity.com/files/148200/WebKitGTK-Data-Leak-Code-Execution.html · Third Party Advisory
• openwall.com/lists/oss-security/2018/06/14/1 · Mailing List
• securityfocus.com/archive/1/542087/100/0/threaded
• bugs.webkit.org/show_bug.cgi · Permissions Required
• security.gentoo.org/glsa/201808-04
• trac.webkit.org/changeset/231300/webkit · Vendor Advisory

webkitgtk+ のその他の脆弱性

• CVE-2020-9952高 7.1An input validation issue was addressed with improved input validation. This issue is fixed in iOS 14.0 and iPadOS 14.0, tvOS 14.0, watchOS …
• CVE-2020-9951高 8.8A use after free issue was addressed with improved memory management. This issue is fixed in Safari 14.0. Processing maliciously crafted web…
• CVE-2020-9948高 8.8A type confusion issue was addressed with improved memory handling. This issue is fixed in Safari 14.0. Processing maliciously crafted web c…
• CVE-2018-4209高 8.8In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Window…