CVE-2017-2466

Related Files

Ubuntu Security Notice USN-3257-1

Posted Apr 11, 2017

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 3257-1 - A large number of security issues were discovered in the WebKitGTK+ Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service attacks, and arbitrary code execution.

tags | advisory, remote, web, denial of service, arbitrary, javascript, code execution, xss

systems | linux, ubuntu

advisories | CVE-2016-9642, CVE-2016-9643, CVE-2017-2364, CVE-2017-2367, CVE-2017-2376, CVE-2017-2377, CVE-2017-2386, CVE-2017-2392, CVE-2017-2394, CVE-2017-2395, CVE-2017-2396, CVE-2017-2405, CVE-2017-2415, CVE-2017-2419, CVE-2017-2433, CVE-2017-2442, CVE-2017-2445, CVE-2017-2446, CVE-2017-2447, CVE-2017-2454, CVE-2017-2455, CVE-2017-2457, CVE-2017-2459, CVE-2017-2460, CVE-2017-2464, CVE-2017-2465, CVE-2017-2466, CVE-2017-2468

SHA-256 | cf093dbe9d28c2da54857b225f129940736f62bb4316b79000fc51f6f1eef93f

Download | Favorite | View

WebKit ComposedTreeIterator::traverseNextInShadowTree Use-After-Free

Posted Apr 9, 2017

Authored by Ivan Fratric, Google Security Research

WebKit suffers from a use-after-free vulnerability in ComposedTreeIterator::traverseNextInShadowTree.

tags | exploit

advisories | CVE-2017-2466

SHA-256 | 089bc31087eb09c29e99dd5d3aad2424215ed1782aca5ec3c05d5911be07ad63

Download | Favorite | View