ID:6134 - Exploit for Buffer overflow in WebKitGTK+ - CVE-2019-8375

 
Main Vulnerability Database Exploits ID:6134 - Exploit for Buffer overflow in WebKitGTK+ - CVE-2019-8375

ID:6134 - Exploit for Buffer overflow in WebKitGTK+ - CVE-2019-8375

Published: June 17, 2021


Vulnerability identifier: #VU18301
Vulnerability risk: High
CVE-ID: CVE-2019-8375
CWE-ID: CWE-119
Exploitation vector: Remote access
Vulnerable software:
WebKitGTK+

Link to public exploit:


Vulnerability description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error within the UIProcess subsystem when processing an overly large script dialog size that exceeds the web view size. A remote attacker can send a specially crafted request to the affected application, trigger memory corruption and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


Remediation

Install updates from vendor's website.