CVE-2018-11646

Related Files

Gentoo Linux Security Advisory 201808-04

Posted Aug 23, 2018

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory 201808-4 - Multiple vulnerabilities have been found in WebKitGTK+, the worst of which may lead to arbitrary code execution. Versions less than 2.20.4 are affected.

tags | advisory, arbitrary, vulnerability, code execution

systems | linux, gentoo

advisories | CVE-2018-11646, CVE-2018-11712, CVE-2018-11713, CVE-2018-12293, CVE-2018-12294, CVE-2018-4101, CVE-2018-4113, CVE-2018-4114, CVE-2018-4117, CVE-2018-4118, CVE-2018-4119, CVE-2018-4120, CVE-2018-4121, CVE-2018-4122, CVE-2018-4125, CVE-2018-4127, CVE-2018-4128, CVE-2018-4129, CVE-2018-4133, CVE-2018-4146, CVE-2018-4162, CVE-2018-4163, CVE-2018-4165, CVE-2018-4190, CVE-2018-4192, CVE-2018-4199, CVE-2018-4200, CVE-2018-4201

SHA-256 | 5081c3ad4349dfef3a23631121519a7a0e0d8d440b3260db527d43b8683f2056

Download | Favorite | View

WebKitGTK+ Data Leak / Code Execution

Posted Jun 14, 2018

Authored by WebKitGTK+ Team

Several vulnerabilities were discovered in WebKitGTK+ and WPE WebKit that can lead to leaking of sensitive data, code execution, and more. Various 2.20.x versions are affected.

tags | advisory, vulnerability, code execution

advisories | CVE-2018-11646, CVE-2018-11712, CVE-2018-11713, CVE-2018-12293, CVE-2018-12294, CVE-2018-4190, CVE-2018-4192, CVE-2018-4199, CVE-2018-4201, CVE-2018-4214, CVE-2018-4218, CVE-2018-4222, CVE-2018-4232, CVE-2018-4233

SHA-256 | c0220c58b288dbb3089fcc06182e86efa1aa62220a826e40338a53ed4207e04a

Download | Favorite | View

WebKitGTK+ WebKitFaviconDatabase Denial Of Service

Posted Jun 11, 2018

Authored by Dhiraj Mishra, Zubin Devnani, Hardik Mehta, Manuel Caballero

This Metasploit module exploits a vulnerability in WebKitFaviconDatabase when pageURL is unset. If successful, it could lead to application crash, resulting in denial of service.

tags | exploit, denial of service

advisories | CVE-2018-11646

SHA-256 | 2d4a36193a36d5db933286558911bee2976dd1809ed77e8e72e1d0079e824e85

Download | Favorite | View

WebKitGTK+ 2.21.3 pageURL Mishandling Denial Of Service

Posted Jun 5, 2018

Authored by Dhiraj Mishra

webkitFaviconDatabaseSetIconForPageURL and webkitFaviconDatabaseSetIconURLForPageURL in UIProcess/API/glib/WebKitFaviconDatabase.cpp in WebKit, as used in WebKitGTK+ through 2.21.3, mishandle an unset pageURL, leading to an application crash.

tags | exploit

advisories | CVE-2018-11646

SHA-256 | 3725c738a09fea389fabaa7eb29da7d502f1c4ac44e99b11eeacaad53d765aa1

Download | Favorite | View