Beveiligingsadvies

CVE-2017-17821

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2017-12-21 03:00:00

Laatst bijgewerkt 2024-08-05 20:59:18

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

WTF/wtf/FastBitVector.h in WebKit, as distributed in Safari Technology Preview Release 46, allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact because it calls the FastBitVectorWordOwner::resizeSlow function (in WTF/wtf/FastBitVector.cpp) for a purpose other than initializing a bitvector size, and resizeSlow mishandles cases where the old array length is greater than the new array length.

← Alle CVE's bekijken Bekijk op cve.org ↗