AVG-362

Package webkit2gtk
Status Fixed
Severity Critical
Type multiple issues
Affected 2.16.5-1
Fixed 2.16.6-1
Current 2.20.3-1 [extra]
Ticket None
Created Tue Jul 25 14:10:18 2017
Issue Severity Remote Type Description
CVE-2017-7064 Medium No Information disclosure
An information disclosure issue has been found in WebKitGTK+ <= 2.16.5, where an application may be able to read restricted memory.
CVE-2017-7061 Critical Yes Arbitrary code execution
Several memory corruption issues have been found in WebKitGTK+ <= 2.16.5, leading to arbitrary code execution when processing maliciously crafted web contents.
CVE-2017-7056 Critical Yes Arbitrary code execution
Several memory corruption issues have been found in WebKitGTK+ <= 2.16.5, leading to arbitrary code execution when processing maliciously crafted web contents.
CVE-2017-7055 Critical Yes Arbitrary code execution
Several memory corruption issues have been found in WebKitGTK+ <= 2.16.5, leading to arbitrary code execution when processing maliciously crafted web contents.
CVE-2017-7048 Critical Yes Arbitrary code execution
Several memory corruption issues have been found in WebKitGTK+ <= 2.16.5, leading to arbitrary code execution when processing maliciously crafted web contents.
CVE-2017-7046 Critical Yes Arbitrary code execution
Several memory corruption issues have been found in WebKitGTK+ <= 2.16.5, leading to arbitrary code execution when processing maliciously crafted web contents.
CVE-2017-7039 Critical Yes Arbitrary code execution
Several memory corruption issues have been found in WebKitGTK+ <= 2.16.5, leading to arbitrary code execution when processing maliciously crafted web contents.
CVE-2017-7037 Critical Yes Arbitrary code execution
Several memory corruption issues have been found in WebKitGTK+ <= 2.16.5, leading to arbitrary code execution when processing maliciously crafted web contents.
CVE-2017-7034 Critical Yes Arbitrary code execution
Several memory corruption issues have been found in WebKitGTK+ <= 2.16.5, leading to arbitrary code execution when processing maliciously crafted web contents.
CVE-2017-7030 Critical Yes Arbitrary code execution
Several memory corruption issues have been found in WebKitGTK+ <= 2.16.5, leading to arbitrary code execution when processing maliciously crafted web contents.
CVE-2017-7018 Critical Yes Arbitrary code execution
Several memory corruption issues have been found in WebKitGTK+ <= 2.16.5, leading to arbitrary code execution when processing maliciously crafted web contents.
Date Advisory Package Description
26 Jul 2017 ASA-201707-25 webkit2gtk multiple issues
References
https://webkitgtk.org/security/WSA-2017-0006.html