CVE-2019-11070
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 3.3%
WebKitGTK and WPE WebKit prior to version 2.24.1 failed to properly apply configured HTTP proxy settings when downloading livestream video (HLS, DASH, or Smooth Streaming), an error resulting in deanonymization. This issue was corrected by changing the way livestreams are downloaded.
Produtos afetados
n/a · n/aReferências
http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00025.htmlhttp://lists.opensuse.org/opensuse-security-announce/2019-05/msg00031.htmlhttp://packetstormsecurity.com/files/152485/WebKitGTK-WPE-WebKit-URI-Spoofing-Code-Execution.htmlhttps://bugs.webkit.org/show_bug.cgi?id=193718https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YO5ZBUWOOXMVZPBYLZRDZF6ZQGBYJERQ/https://seclists.org/bugtraq/2019/Apr/21https://security.gentoo.org/glsa/201909-05https://trac.webkit.org/changeset/243197/webkithttps://usn.ubuntu.com/3948-1/http://www.openwall.com/lists/oss-security/2019/04/11/1