ByteOS Network

NVD Vulnerability Details :

CVE-2018-12293

Modified

Source-cve@mitre.org

Published At-19 Jun, 2018 | 21:29

Updated At-24 Aug, 2020 | 17:37

The getImageData function in the ImageBufferCairo class in WebCore/platform/graphics/cairo/ImageBufferCairo.cpp in WebKit, as used in WebKitGTK+ prior to version 2.20.3 and WPE WebKit prior to version 2.20.1, is vulnerable to a heap-based buffer overflow triggered by an integer overflow, which could be abused by crafted HTML content.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	8.8	HIGH	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary	2.0	6.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:P

CPE Matches

Canonical Ltd.

>>ubuntu_linux>>16.04

cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*

Canonical Ltd.

>>ubuntu_linux>>17.10

cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*

Canonical Ltd.

>>ubuntu_linux>>18.04

cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*

webkitgtk>>webkitgtk\+>>Versions before 2.20.3(exclusive)

cpe:2.3:a:webkitgtk:webkitgtk\+:*:*:*:*:*:*:*:*

wpewebkit>>wpe_webkit>>Versions before 2.20.1(exclusive)

cpe:2.3:a:wpewebkit:wpe_webkit:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-190	Primary	nvd@nist.gov
CWE-787	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://packetstormsecurity.com/files/148200/WebKitGTK-Data-Leak-Code-Execution.html	cve@mitre.org	Third Party Advisory VDB Entry
http://www.openwall.com/lists/oss-security/2018/06/14/1	cve@mitre.org	Mailing List Technical Description
http://www.securityfocus.com/archive/1/542087/100/0/threaded	cve@mitre.org	N/A
https://bugs.webkit.org/show_bug.cgi?id=186384	cve@mitre.org	Permissions Required Vendor Advisory
https://security.gentoo.org/glsa/201808-04	cve@mitre.org	N/A
https://trac.webkit.org/changeset/232618	cve@mitre.org	Patch Third Party Advisory Vendor Advisory
https://usn.ubuntu.com/3687-1/	cve@mitre.org	Third Party Advisory
https://www.exploit-db.com/exploits/45205/	cve@mitre.org	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History