Vulnetix
Try Vulnetix Request Demo
CVE-2019-8375 PUBLISHED

The UIProcess subsystem in WebKit, as used in WebKitGTK through 2.23.90 and WebKitGTK+ through 2.22.6 and other products, does not prevent the script dialog size from exceeding the web view size, which allows remote attackers to cause a denial of service (Buffer Overflow) or possibly have unspecified other impact, related to UIProcess/API/gtk/WebKitScriptDialogGtk.cpp, UIProcess/API/gtk/WebKitScriptDialogImpl.cpp, and UIProcess/API/gtk/WebKitWebViewGtk.cpp, as demonstrated by GNOME Web (aka Epiphany).

EPSS 19.28% · 95.3th percentile

Risk Scores

EPSS Score
19.28%
95.3th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSqtwebkit-source2.3.2-0ubuntu11, 2.3.2-0ubuntu10, 0
Ubuntu:18.04:LTSqtwebkit-source0, 2.3.2-0ubuntu13
Ubuntu:16.04:LTSwebkit2gtk2.10.9-1ubuntu1, 2.14.2-0ubuntu0.16.04.1, 2.12.5-0ubuntu0.16.04.1
Ubuntu:18.04:LTSqtwebkit-opensource-src5.9.1+dfsg-5ubuntu1, *, *
Ubuntu:18.04:LTSwebkit2gtk2.20.1-1, 2.18.0-2, 2.18.0-2build1
Ubuntu:22.04:LTSqtwebkit-opensource-src5.212.0~alpha4-15ubuntu1, *, *
Ubuntu:18.04:LTSwebkitgtk2.4.11-3ubuntu3, 0, 2.4.11-3ubuntu2
Ubuntu:20.04:LTSqtwebkit-opensource-src5.212.0~alpha3-6, 5.212.0~alpha3-7, 5.212.0~alpha4-1ubuntu1
Ubuntu:16.04:LTSwebkitgtk2.4.9-2ubuntu2, 0, 2.4.10-0ubuntu1
Ubuntu:24.04:LTSqtwebkit-opensource-src*, 5.212.0~alpha4-34ubuntu4, 5.212.0~alpha4-36
Ubuntu:16.04:LTSqtwebkit-opensource-src5.4.2+dfsg-1ubuntu2.1, 5.5.1+dfsg-2ubuntu1, 0

Timeline

References

Open in Interactive Console →