WebKitGTK and WPE WebKit prior to version 2.24.1 failed to properly apply configured HTTP proxy settings when downloading livestream video (HLS, DASH, or Smooth Streaming), an error resulting in deanonymization. This issue was corrected by changing the way livestreams are downloaded.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| https://bugs.webkit.org/show_bug.cgi?id=193718 | x_refsource_MISC |
| https://trac.webkit.org/changeset/243197/webkit | x_refsource_MISC |
| https://seclists.org/bugtraq/2019/Apr/21 | mailing-list x_refsource_BUGTRAQ |
| http://www.openwall.com/lists/oss-security/2019/04/11/1 | mailing-list x_refsource_MLIST |
| http://packetstormsecurity.com/files/152485/WebKitGTK-WPE-WebKit-URI-Spoofing-Code-Execution.html | x_refsource_MISC |
| https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YO5ZBUWOOXMVZPBYLZRDZF6ZQGBYJERQ/ | vendor-advisory x_refsource_FEDORA |
| https://usn.ubuntu.com/3948-1/ | vendor-advisory x_refsource_UBUNTU |
| http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00025.html | vendor-advisory x_refsource_SUSE |
| http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00031.html | vendor-advisory x_refsource_SUSE |
| https://security.gentoo.org/glsa/201909-05 | vendor-advisory x_refsource_GENTOO |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|