CVE-2017-1000121

n/a / n/a PUBLISHED

Description (CNA)

The UNIX IPC layer in WebKit, including WebKitGTK+ prior to 2.16.3, does not properly validate message size metadata, allowing a compromised secondary process to trigger an integer overflow and subsequent buffer overflow in the UI process. This vulnerability does not affect Apple products.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

http://trac.webkit.org/changeset/217126/webkit

ADP enrichment

CVE

No English description supplied.

http://trac.webkit.org/changeset/217126/webkit

CISA-ADP

No English description supplied.

No references supplied.