| Package | Affected versions | Patched versions |
|---|---|---|
| epiphany | ≥ 42.0, < 42.2< 41.4 | 42.241.4 |
In GNOME Epiphany before 41.4 and 42.x before 42.2, an HTML document can trigger a client buffer overflow (in ephy_string_shorten in the UI process) via a long page title. The issue occurs because the number of bytes for a UTF-8 ellipsis character is not properly considered.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free