Wind River Support Network

HomeDefectsLIN10-4038
Fixed

LIN10-4038 : Security Advisory - epiphany - CVE-2018-11396

Created: Jun 1, 2018    Updated: Dec 24, 2018
Resolved Date: Jun 24, 2018
Found In Version: 10.17.41.1
Fix Version: 10.17.41.9
Severity: Standard
Applicable for: Wind River Linux LTS 17
Component/s: Userspace

Description

ephy-session.c in libephymain.so in GNOME Web (aka Epiphany) through 3.28.2.1 allows remote attackers to cause a denial of service (application crash) via JavaScript code that triggers access to a NULL URL, as demonstrated by a crafted window.open call.

https://nvd.nist.gov/vuln/detail/CVE-2018-11396

Other Downloads


CVEs


Live chat
Online