PT-2017-10824
CVE-2017-1000122
·
Published
2017-05-27
·
Updated
2017-11-21
Description by
CVSS 3.1
5.3
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Name of the Vulnerable Software and Affected Versions
WebKitGTK+ versions prior to 2.16.3
Description
The UNIX IPC layer in WebKit does not properly validate certain message metadata, allowing a compromised secondary process to cause a denial of service of the UI process. This issue does not affect Apple products.
Recommendations
For WebKitGTK+ versions prior to 2.16.3, update to version 2.16.3 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾