Main Vulnerability Database Vulnerabilities #VU11211

#VU11211 Memory corruption in WebKitGTK+ - CVE-2017-13885

Published: March 22, 2018 / Updated: March 22, 2018

Vulnerability identifier: #VU11211

Vulnerability risk: High

CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber

CVE-ID: CVE-2017-13885

CWE-ID: CWE-119

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerable software:
WebKitGTK+

Software vendor:
WebKitGTK

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The weakness exists due to boundary error. A remote attacker can submit specially crafted web content, trigger memory corruption and execute arbitrary code.

Successful exploitation of the vulnerability may result in system compromise.

Remediation

Update to version 2.18.6.

External links

https://webkitgtk.org/security/WSA-2018-0002.html