[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248392

 
 

909

 
 

195452

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

[3.7] webkit2gtk: Multiple vulnerabilities (Various CVEs)

ID: oval:org.secpod.oval:def:1800619Date: (C)2018-03-29   (M)2024-01-29
Class: PATCHFamily: unix




CVE-2017-7087¶ Versions affected: WebKitGTK+ before 2.18.0Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Description: Multiple memory corruption issues were addressed with improved memory handling. CVE-2017-7089¶ Versions affected: WebKitGTK+ before 2.18.0.Impact: Processing maliciously crafted web content may lead to universal cross site scripting. Description: A logic issue existed in the handling of the parent-tab. CVE-2017-7090¶ Versions affected: WebKitGTK+ before 2.18.0.Impact: Cookies belonging to one origin may be sent to another origin. Description: A permissions issue existed in the handling of web browser cookies. CVE-2017-7091¶ Versions affected: WebKitGTK+ before 2.18.0.Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Description: Multiple memory corruption issues were addressed with improved memory handling. CVE-2017-7092¶ Versions affected: WebKitGTK+ before 2.18.0.Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Description: Multiple memory corruption issues were addressed with improved memory handling. CVE-2017-7093¶ Versions affected: WebKitGTK+ before 2.18.0.Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Description: Multiple memory corruption issues were addressed with improved memory handling. CVE-2017-7095¶ Versions affected: WebKitGTK+ before 2.18.0.Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Description: Multiple memory corruption issues were addressed with improved memory handling. CVE-2017-7096¶ Versions affected: WebKitGTK+ before 2.18.0.Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Description: Multiple memory corruption issues were addressed with improved memory handling. CVE-2017-7098¶ Versions affected: WebKitGTK+ before 2.18.0.Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Description: Multiple memory corruption issues were addressed with improved memory handling. CVE-2017-7100¶ Versions affected: WebKitGTK+ before 2.18.0.Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Description: Multiple memory corruption issues were addressed with improved memory handling. CVE-2017-7102¶ Versions affected: WebKitGTK+ before 2.18.0.Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Description: Multiple memory corruption issues were addressed with improved memory handling. CVE-2017-7104¶ Versions affected: WebKitGTK+ before 2.18.0. Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Description: Multiple memory corruption issues were addressed with improved memory handling. CVE-2017-7107¶ Versions affected: WebKitGTK+ before 2.18.0.Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Description: Multiple memory corruption issues were addressed with improved memory handling. CVE-2017-7109¶ Versions affected: WebKitGTK+ before 2.18.0.Impact: Processing maliciously crafted web content may lead to a cross site scripting attack. Description: Application Cache policy may be unexpectedly applied. CVE-2017-7111¶ Versions affected: WebKitGTK+ before 2.18.0.Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Description: Multiple memory corruption issues were addressed with improved memory handling. CVE-2017-7117¶ Versions affected: WebKitGTK+ before 2.18.0.Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Description: Multiple memory corruption issues were addressed with improved memory handling. CVE-2017-7120¶ Versions affected: WebKitGTK+ before 2.18.0.Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Description: Multiple memory corruption issues were addressed with improved memory handling.

Platform:
Alpine Linux 3.7
Product:
webkit2gtk
Reference:
8054
CVE-2017-7087
CVE-2017-7089
CVE-2017-7090
CVE-2017-7091
CVE-2017-7092
CVE-2017-7093
CVE-2017-7095
CVE-2017-7096
CVE-2017-7098
CVE-2017-7100
CVE-2017-7102
CVE-2017-7104
CVE-2017-7107
CVE-2017-7109
CVE-2017-7111
CVE-2017-7117
CVE-2017-7120
CVE-2017-13783
CVE-2017-13784
CVE    19
CVE-2017-13783
CVE-2017-13784
CVE-2017-7091
CVE-2017-7090
...
CPE    2
cpe:/a:webkitgtk:webkit2gtk
cpe:/o:alpinelinux:alpine_linux:3.7

© SecPod Technologies