CVE-2020-13543
03.12.2020, 17:15
A code execution vulnerability exists in the WebSocket functionality of Webkit WebKitGTK 2.30.0. A specially crafted web page can trigger a use-after-free vulnerability which can lead to remote code execution. An attacker can get a user to visit a webpage to trigger this vulnerability.Enginsight
| Vendor | Product | Version |
|---|---|---|
| webkitgtk | webkitgtk | 2.30.0 |
𝑥
= Vulnerable software versions
Debian Releases
Debian Product | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| webkit2gtk |
| ||||||||||||||
| wpewebkit |
|
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| qtwebkit |
| ||||||||||||||||||||||||
| qtwebkit-opensource-src |
| ||||||||||||||||||||||||
| qtwebkit-source |
| ||||||||||||||||||||||||
| webkit2gtk |
| ||||||||||||||||||||||||
| webkitgtk |
| ||||||||||||||||||||||||
| wpewebkit |
|
Common Weakness Enumeration
References