Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2020-3897

Опубликовано: 01 апр. 2020
Источник: debian
EPSS Низкий

Описание

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. A remote attacker may be able to cause arbitrary code execution.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
webkit2gtkfixed2.28.0-2package
webkit2gtkignoredstretchpackage
webkit2gtkignoredjessiepackage
wpewebkitfixed2.28.0-1package

Примечания

  • https://webkitgtk.org/security/WSA-2020-0005.html

EPSS

Процентиль: 74%
0.00887
Низкий

Связанные уязвимости

CVSS3: 8.8
ubuntu
около 5 лет назад

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. A remote attacker may be able to cause arbitrary code execution.

CVSS3: 8.8
redhat
около 5 лет назад

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. A remote attacker may be able to cause arbitrary code execution.

CVSS3: 8.8
nvd
около 5 лет назад

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. A remote attacker may be able to cause arbitrary code execution.

CVSS3: 8.8
github
около 3 лет назад

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. A remote attacker may be able to cause arbitrary code execution.

CVSS3: 8.8
fstec
больше 5 лет назад

Уязвимость модуля отображения WebKit, связанная с ошибкой преобразования типов, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 74%
0.00887
Низкий