Gertjan Franken

The issue is related to insufficient input validation, which may allow a remote attacker to impact data integrity. A logic issue was addressed with improved validation. The Content Security Policy to block domains with wildcards may fail.

A resource exhaustion issue was addressed with improved input validation. Parsing a maliciously crafted iBooks file may lead to a persistent denial-of-service.

A validation issue existed in the handling of symlinks, which has been addressed with improved validation. Parsing a maliciously crafted iBooks file may lead to disclosure of user information.

The issue is related to insufficient policy enforcement in the Blink module of Google Chrome, allowing a remote attacker to leak cross-origin data via a crafted HTML page. This could enable the attacker to access confidential data.