CVE-2018-11646

EPSS 69.0%

webkitFaviconDatabaseSetIconForPageURL and webkitFaviconDatabaseSetIconURLForPageURL in UIProcess/API/glib/WebKitFaviconDatabase.cpp in WebKit, as used in WebKitGTK+ through 2.21.3, mishandle an unset pageURL, leading to an application crash.

Affected products

n/a · n/a

public PoCs found — 4

cve_referencewww.exploit-db.com/exploits/44842/unverified cve_referencewww.exploit-db.com/exploits/44876/unverified exploitdbwww.exploit-db.com/exploits/44876unverified exploitdbwww.exploit-db.com/exploits/44842unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://bugs.webkit.org/show_bug.cgi?id=186164 https://bugzilla.gnome.org/show_bug.cgi?id=795740 https://security.gentoo.org/glsa/201808-04 https://www.exploit-db.com/exploits/44842/https://www.exploit-db.com/exploits/44876/