Apple patches UXSS found in Safari

guest · Aug 13, 2019

Apple patches UXSS found in Safari
WebKit chaos
August 13, 2019
https://portswigger.net/daily-swig/apple-patches-uxss-found-in-safari-nbsp

Software using the popular browser engine WebKit to render web pages was temporarily vulnerable to a Universal Cross-site Scripting attack (UXSS), Google’s Project Zero announced yesterday.

This was due to an issue with the way WebKit deletes cross-domain objects when a page is unloaded. The issue, which would have allowed an attacker to execute JavaScript from one domain to another, has since been patched.

“The problem is that by the time setDocument is called, newDocument might already have a reference to a Frame object, and if the method returns early, that reference will never get cleared by subsequent navigations,” Project Zero’s Sergei Glazunov wrote in a bug report.
The critical vulnerability was reported to Apple on June 4 – Google has a hardline 90-day patch deadline for vendors.
Click to expand...

guest · Oct 3, 2019

Another UXSS bug found in Safari WebKit
October 1, 2019
https://portswigger.net/daily-swig/another-uxss-bug-found-in-safari-webkit

Google’s Project Zero has announced another universal cross-site scripting (UXSS) vulnerability in WebKit, the popular browser engine.

The bug, which has since been patched, could have allowed an attacker to execute JavaScript from one domain to another in software using WebKit, a core component in Apple products like Safari.

“The method calls DocumentWriter::begin, which might trigger JavaScript execution, and then sends data to the parser of the active document,” Project Zero’s Sergei Glazunov wrote in a bug report.
Both issues should have been resolved with an automatic security update. Users should ensure that their Apple operating systems are up to date and running the latest version of Safari.
Click to expand...

guest · Oct 30, 2019

Project Zero discloses UXSS in Safari WebKit
More iframe woes
October 29, 2019
https://portswigger.net/daily-swig/project-zero-discloses-uxss-in-safari-webkit

Google’s Project Zero has disclosed a universal cross-site scripting (UXSS) flaw in WebKit, the popular browser engine.
The bug, which has since been fixed, could have allowed an attacker to execute JavaScript cross-domain in software using WebKit, a core component in Apple products like Safari.

Security checks were put in place to prevent subframe counter from overflowing. However, Project Zero found that these measures could be bypassed through the use of multiple iframes – including one that contained an empty URL.

“Therefore, an attacker can insert exactly 1024 frame elements with an empty URL into a node, so its connected subframe counter will overflow and become zero,” Project Zero’s Sergei Glazunov said in a recently published bug report.
The critical vulnerability was reported to Apple on July 23, and followed its 90-day patch deadline.
Click to expand...

Log in or Sign up

Apple patches UXSS found in Safari

guest Guest

guest Guest

guest Guest

Log in or Sign up

Apple patches UXSS found in Safari

guest Guest

guest Guest

guest Guest

Useful Searches