Gertjan Franken

The issue is related to insufficient input validation, which may allow a remote attacker to impact data integrity. A logic issue was addressed with improved validation. The Content Security Policy to block domains with wildcards may fail.

Um problema de esgotamento de recursos foi corrigido com uma validação de entrada aprimorada. A análise de um arquivo do iBooks criado de forma maliciosa pode levar a uma negação de serviço persistente.

A validation issue existed in the handling of symlinks, which has been addressed with improved validation. Parsing a maliciously crafted iBooks file may lead to disclosure of user information.

The issue is related to insufficient policy enforcement in the Blink module of Google Chrome, allowing a remote attacker to leak cross-origin data via a crafted HTML page. This could enable the attacker to access confidential data.