[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250770

 
 

909

 
 

196157

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

DSA-4877-1 webkit2gtk -- webkit2gtk

ID: oval:org.secpod.oval:def:605473Date: (C)2021-03-31   (M)2024-05-16
Class: PATCHFamily: unix




The following vulnerabilities have been discovered in the libwebkit2gtk-4.0-dev web engine: CVE-2020-27918 Liu Long discovered that processing maliciously crafted web content may lead to arbitrary code execution. CVE-2020-29623 Simon Hunt discovered that users may be unable to fully delete their browsing history under some circumstances. CVE-2021-1765 Eliya Stein discovered that maliciously crafted web content may violate iframe sandboxing policy. CVE-2021-1789 @S0rryMybad discovered that processing maliciously crafted web content may lead to arbitrary code execution. CVE-2021-1799 Gregory Vishnepolsky, Ben Seri and Samy Kamkar discovered that a malicious website may be able to access restricted ports on arbitrary servers. CVE-2021-1801 Eliya Stein discovered that processing maliciously crafted web content may lead to arbitrary code execution. CVE-2021-1870 An anonymous researcher discovered that processing maliciously crafted web content may lead to arbitrary code execution.

Platform:
Debian 10.x
Product:
libwebkit2gtk-4.0-doc
gir1.2-javascriptcoregtk-4.0
libwebkit2gtk-4.0-dev
libjavascriptcoregtk-4.0-bin
gir1.2-webkit2-4.0
libjavascriptcoregtk-4.0-dev
libwebkit2gtk-4.0-37
webkit2gtk-driver
libjavascriptcoregtk-4.0-18
Reference:
DSA-4877-1
CVE-2020-27918
CVE-2020-29623
CVE-2021-1765
CVE-2021-1789
CVE-2021-1799
CVE-2021-1801
CVE-2021-1870
CVE-2021-21806
CVE    8
CVE-2021-21806
CVE-2020-29623
CVE-2020-27918
CVE-2021-1765
...
CPE    2
cpe:/o:debian:debian_linux:10.x
cpe:/a:webkitgtk:libwebkit2gtk-4.0-dev

© SecPod Technologies