Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wj4h-m2xv-4349

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

WebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, does not properly validate WebProcess IPC messages, which allows remote attackers to bypass a sandbox protection mechanism and read arbitrary files by leveraging WebProcess access.

WebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, does not properly validate WebProcess IPC messages, which allows remote attackers to bypass a sandbox protection mechanism and read arbitrary files by leveraging WebProcess access.

EPSS

Процентиль: 40%
0.00184
Низкий

Дефекты

CWE-20

Связанные уязвимости

ubuntu
почти 12 лет назад

WebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, does not properly validate WebProcess IPC messages, which allows remote attackers to bypass a sandbox protection mechanism and read arbitrary files by leveraging WebProcess access.

redhat
около 11 лет назад

WebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, does not properly validate WebProcess IPC messages, which allows remote attackers to bypass a sandbox protection mechanism and read arbitrary files by leveraging WebProcess access.

nvd
почти 12 лет назад

WebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, does not properly validate WebProcess IPC messages, which allows remote attackers to bypass a sandbox protection mechanism and read arbitrary files by leveraging WebProcess access.

EPSS

Процентиль: 40%
0.00184
Низкий

Дефекты

CWE-20