PT-2016-6046 · Webkitgtk+1 · Webkitgtk+1

Bo Qu + 1 · Publicado 2016-07-21 · Atualizado 2019-03-25 · CVE-2016-4589

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WebKitGTK+ versions prior to 2.12.5-0ubuntu0.16.04.1

Description A large number of security issues were discovered in the WebKitGTK+ Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service attacks, and arbitrary code execution.

Recommendations Update the system to the following package versions: gir1.2-javascriptcoregtk-4.0 - 2.12.5-0ubuntu0.16.04.1 libwebkit2gtk-4.0-37-gtk2 - 2.12.5-0ubuntu0.16.04.1 libjavascriptcoregtk-4.0-dev - 2.12.5-0ubuntu0.16.04.1 libwebkit2gtk-4.0-37 - 2.12.5-0ubuntu0.16.04.1 libjavascriptcoregtk-4.0-18 - 2.12.5-0ubuntu0.16.04.1 libwebkit2gtk-4.0-doc - 2.12.5-0ubuntu0.16.04.1 libjavascriptcoregtk-4.0-bin - 2.12.5-0ubuntu0.16.04.1 gir1.2-webkit2-4.0 - 2.12.5-0ubuntu0.16.04.1 libwebkit2gtk-4.0-dev - 2.12.5-0ubuntu0.16.04.1 Run sudo pro fix USN-3079-1 to fix the vulnerability.

Exploit

Correção

RCE

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2016-4589

USN-3079-1

Produtos afetados

Ubuntu

Webkitgtk

Referências · 61

• 🔥 https://github.com/tunz/js-vuln-db/blob/master/jsc/CVE-2016-1857.md · Exploit
• 🔥 https://github.com/tunz/js-vuln-db/blob/master/jsc/CVE-2016-4622.md · Exploit
• 🔥 https://github.com/hdbreaker/WebKit-CVE-2016-4622 · Exploit
• https://github.com/saelo/jscpwn · Nota
• https://bdu.fstec.ru/vul/2016-01450 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4624 · Nota de Segurança
• https://osv.dev/vulnerability/USN-3079-1 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2016-4589 · Nota de Segurança
• https://support.apple.com/HT206900 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1859 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4590 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4651 · Nota de Segurança
• https://bdu.fstec.ru/vul/2016-01449 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4623 · Nota de Segurança
• https://bdu.fstec.ru/vul/2016-02129 · Nota de Segurança