Wind River Support Network

HomeDefectsLIN6-14001
Fixed

LIN6-14001 : Security Advisory - webkit - CVE-2017-1000121

Created: Nov 13, 2017    Updated: Dec 3, 2018
Resolved Date: Dec 25, 2017
Found In Version: 6.0.0.35
Fix Version: 6.0.0.36
Severity: Standard
Applicable for: Wind River Linux 6
Component/s: Userspace

Description

The UNIX IPC layer in WebKit, including WebKitGTK+ prior to 2.16.3, does not properly validate message size metadata, allowing a compromised secondary process to trigger an integer overflow and subsequent buffer overflow in the UI process. This vulnerability does not affect Apple products.

https://nvd.nist.gov/vuln/detail/CVE-2017-1000121

Other Downloads


Live chat
Online