Heap-based Buffer Overflow Affecting libwebkit2gtk package, versions *
Threat Intelligence
Exploit Maturity
Mature
EPSS
26.83% (97th
percentile)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-RHEL7-LIBWEBKIT2GTK-1327019
- published 26 Jul 2021
- disclosed 26 Jan 2015
Introduced: 26 Jan 2015
CVE-2014-1303 Open this link in a new tabHow to fix?
There is no fixed version for RHEL:7 libwebkit2gtk.
NVD Description
Note: Versions mentioned in the description apply only to the upstream libwebkit2gtk package and not the libwebkit2gtk package as distributed by RHEL.
See How to fix? for RHEL:7 relevant fixed versions and status.
Heap-based buffer overflow in Apple Safari 7.0.2 allows remote attackers to execute arbitrary code and bypass a sandbox protection mechanism via unspecified vectors, as demonstrated by Liang Chen during a Pwn2Own competition at CanSecWest 2014.
References
- http://archives.neohapsis.com/archives/bugtraq/2014-04/0009.html
- http://archives.neohapsis.com/archives/bugtraq/2014-04/0135.html
- http://archives.neohapsis.com/archives/bugtraq/2014-04/0136.html
- https://support.apple.com/kb/HT6537
- https://access.redhat.com/security/cve/CVE-2014-1303
- http://twitter.com/thezdi/statuses/444157530139136000
- http://www.pwn2own.com/2014/03/pwn2own-results-thursday-day-two/
- https://www.exploit-db.com/exploits/44200
CVSS Scores
version 3.1