| Vulnerability Name: | CVE-2018-12294 (CCN-145145) | ||||||||||||||||||||||||||||||||||||||||
| Assigned: | 2018-06-13 | ||||||||||||||||||||||||||||||||||||||||
| Published: | 2018-06-13 | ||||||||||||||||||||||||||||||||||||||||
| Updated: | 2018-10-21 | ||||||||||||||||||||||||||||||||||||||||
| Summary: | WebCore/platform/graphics/texmap/TextureMapperLayer.cpp in WebKit, as used in WebKitGTK+ prior to version 2.20.2, is vulnerable to a use after free for a WebCore::TextureMapperLayer object. | ||||||||||||||||||||||||||||||||||||||||
| CVSS v3 Severity: | 8.8 High (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) 7.7 High (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)
6.5 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)
| ||||||||||||||||||||||||||||||||||||||||
| CVSS v2 Severity: | 6.8 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P)
| ||||||||||||||||||||||||||||||||||||||||
| Vulnerability Type: | CWE-416 | ||||||||||||||||||||||||||||||||||||||||
| Vulnerability Consequences: | Denial of Service | ||||||||||||||||||||||||||||||||||||||||
| References: | Source: MITRE Type: CNA CVE-2018-12294 Source: MISC Type: Third Party Advisory, VDB Entry http://packetstormsecurity.com/files/148200/WebKitGTK-Data-Leak-Code-Execution.html Source: CCN Type: oss-sec Mailing List, Thu, 14 Jun 2018 09:48:50 -0500 WebKitGTK+ and WPE WebKit Security Advisory WSA-2018-0005 Source: MLIST Type: Mailing List [oss-security] 20180614 WebKitGTK+ and WPE WebKit Security Advisory WSA-2018-0005 Source: BUGTRAQ Type: UNKNOWN 20180614 WebKitGTK+ and WPE WebKit Security Advisory WSA-2018-0005 Source: MISC Type: Permissions Required, Vendor Advisory https://bugs.webkit.org/show_bug.cgi?id=184729 Source: XF Type: UNKNOWN webkitgtk-cve201812294-dos(145145) Source: GENTOO Type: UNKNOWN GLSA-201808-04 Source: MISC Type: Vendor Advisory https://trac.webkit.org/changeset/231300/webkit Source: CCN Type: WebKitGTK+ Security Advisory: WSA-2018-0005 WebKitGTK+ and WPE WebKit Security Advisory WSA-2018-0005 Source: CCN Type: WhiteSource Vulnerability Database CVE-2018-12294 | ||||||||||||||||||||||||||||||||||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||||||||||||||||||||||||||||||||||
| Oval Definitions | |||||||||||||||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||||||||||||||
| BACK | |||||||||||||||||||||||||||||||||||||||||