Most recent entries from all

CERTFR-2018-AVI-201 — De multiples vulnérabilités ont été découvertes dans les produits Apple. Elles permettent à un attaquant de provoquer u…

CERTFR-2018-AVI-201

cnvd-2018-09989

fkie_cve-2018-4200

GHSA-xpr5-5ww3-6f66

gsd-2018-4200

openSUSE-SU-2024:11506-1 — libjavascriptcoregtk-4_0-18-2.32.4-1.1 on GA media

libjavascriptcoregtk-4_0-18-2.32.4-1.1 on GA media

RHSA-2018:3140 — Red Hat Security Advisory: GNOME security, bug fix, and enhancement update

freetype: a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c leading to crash freetype: mishandling ps_parser_skip_PS_token in an FT_New_Memory_Face operation in skip_comment, psaux/psobjs.c, leads to a buffer over-read gdk-pixbuf2: Heap overflow in the gdk_pixbuf__jpeg_image_load_increment function poppler: Infinite recursion in fofi/FoFiType1C.cc:FoFiType1C::cvtGlyph() function allows denial of service webkitgtk: memory corruption processing maliciously crafted web content webkitgtk: memory corruption processing maliciously crafted web content webkitgtk: memory corruption processing maliciously crafted web content libgxps: heap based buffer over read in ft_font_face_hash function of gxps-fonts.c libgxps: Stack-based buffer overflow in calling glib in gxps_images_guess_content_type of gcontenttype.c poppler: NULL pointer dereference in Annot.h:AnnotPath::getCoordsLength() allows for denial of service via crafted PDF webkitgtk: Improper TLS certificate verification for WebSocket connections webkitgtk: WebSockets don't use system proxy settings libsoup: Crash in soup_cookie_jar.c:get_cookies() on empty hostnames poppler: out of bounds read in pdfunite accountsservice: insufficient path check in user_change_icon_file_authorized_cb() in user.c

SUSE-SU-2018:3387-1 — Security update for webkit2gtk3

Security update for webkit2gtk3

UBUNTU-CVE-2018-4200

Affected: Ubuntu:16.04:LTS: webkit2gtk, Ubuntu:16.04:LTS: qtwebkit-opensource-src, Ubuntu:16.04:LTS: qtwebkit-source, Ubuntu:16.04:LTS: webkitgtk, Ubuntu:18.04:LTS: webkit2gtk, Ubuntu:18.04:LTS: qtwebkit-opensource-src, Ubuntu:18.04:LTS: qtwebkit-source, Ubuntu:18.04:LTS: webkitgtk, Ubuntu:20.04:LTS: qtwebkit-opensource-src, Ubuntu:22.04:LTS: qtwebkit-opensource-src and 1 more

VAR-201806-1487

An issue was discovered in certain Apple products. iOS before 11.3.1 is affected. Safari before 11.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site that triggers a WebCore::jsElementScrollHeightGetter use-after-free. WebKit is prone to multiple memory corruption vulnerabilities. Failed exploit attempts may result in a denial-of-service condition. Both Apple iOS and Safari are products of Apple (Apple). Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser included with Mac OS X and iOS operating systems. WebKit is a set of open source web browser engines jointly developed by companies such as KDE, Apple (Apple), and Google (Google), and is currently used by browsers such as Apple Safari and Google Chrome. A memory corruption vulnerability exists in the WebKit component of Apple Safari versions prior to 11.1 and iOS versions prior to 11.3.1. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512

APPLE-SA-2018-04-24-3 Safari 11.1 (v. 11605.1.33.1.4, 12605.1.33.1.4, and 13605.1.33.1.4) may be obtained from the Mac App Store. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory G…