webkitgtk: Multiple memory corruption issues leading to arbitrary code execution
Published Feb 27, 2020
8.8
HIGHCVSS 3.1
EPSS 2.70%
Description
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted web content may lead to arbitrary code execution.
Affected products
-
Affected
- ≥ unspecified, < Safari 13.0.5
-
Affected
- ≥ unspecified, < iCloud for Windows 11.0
-
Affected
- ≥ unspecified, < iCloud for Windows 7.17
-
Affected
- ≥ unspecified, < iOS 13.3.1 and iPadOS 13.3.1
-
Affected
- ≥ unspecified, < iTunes for Windows 12.10.4
-
Affected
- ≥ unspecified, < tvOS 13.3.1
Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).
| Vendor | Product | Default status | Versions |
|---|---|---|---|
| Apple | Safari | unknown | Affected
|
| Apple | iCloud for Windows | unknown | Affected
|
| Apple | iCloud for Windows (Legacy) | unknown | Affected
|
| Apple | iOS | unknown | Affected
|
| Apple | iTunes for Windows | unknown | Affected
|
| Apple | tvOS | unknown | Affected
|
No data.
Red Hat Enterprise Linux 7
webkitgtk4-0:2.28.2-2.el7
Fixed · RHSA-2020:4035
Red Hat Enterprise Linux 8
webkit2gtk3-0:2.28.4-1.el8
Fixed · RHSA-2020:4451
Red Hat Enterprise Linux 6
webkitgtk
Out of support scope
Red Hat Enterprise Linux 7
webkitgtk3
Will not fix
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 7 | webkitgtk4-0:2.28.2-2.el7 | Fixed | RHSA-2020:4035 |
| Red Hat Enterprise Linux 8 | webkit2gtk3-0:2.28.4-1.el8 | Fixed | RHSA-2020:4451 |
| Red Hat Enterprise Linux 6 | webkitgtk | Out of support scope | n/a |
| Red Hat Enterprise Linux 7 | webkitgtk3 | Will not fix | n/a |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
References (11)
- http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00004.html vendor-advisoryx_refsource_SUSEMailing ListPatchThird Party Advisory
- https://access.redhat.com/security/cve/CVE-2020-3868 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1876523 Issue Tracking
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-25133 Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2020-3868
- https://security.gentoo.org/glsa/202003-22 vendor-advisoryx_refsource_GENTOOThird Party Advisory
- https://support.apple.com/HT210920 x_refsource_MISCRelease NotesVendor Advisory
- https://support.apple.com/HT210947 x_refsource_MISCRelease NotesVendor Advisory
- https://support.apple.com/HT210948 x_refsource_MISCRelease NotesVendor Advisory
- https://webkitgtk.org/security/WSA-2020-0002.html
- https://www.cve.org/CVERecord?id=CVE-2020-3868
| Link | Providers | Tags |
|---|---|---|
| http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00004.html | vendor-advisoryx_refsource_SUSEMailing ListPatchThird Party Advisory | |
| https://access.redhat.com/security/cve/CVE-2020-3868 | Vendor Advisory | |
| https://bugzilla.redhat.com/show_bug.cgi?id=1876523 | Issue Tracking | |
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-25133 | Advisory | |
| https://nvd.nist.gov/vuln/detail/CVE-2020-3868 | ||
| https://security.gentoo.org/glsa/202003-22 | vendor-advisoryx_refsource_GENTOOThird Party Advisory | |
| https://support.apple.com/HT210920 | x_refsource_MISCRelease NotesVendor Advisory | |
| https://support.apple.com/HT210947 | x_refsource_MISCRelease NotesVendor Advisory | |
| https://support.apple.com/HT210948 | x_refsource_MISCRelease NotesVendor Advisory | |
| https://webkitgtk.org/security/WSA-2020-0002.html | ||
| https://www.cve.org/CVERecord?id=CVE-2020-3868 |
Change history (0)
No recorded changes yet.
CVE.org / MITRE
CISA Vulnrichment
No data
GitHub
No data