WebKit Vulnerability Affects Latest Versions of Apple Safari

guest · Dec 8, 2018

WebKit Vulnerability Affects Latest Versions of Apple Safari
December 8, 2018
https://www.bleepingcomputer.com/ne...lity-affects-latest-versions-of-apple-safari/

The exploit takes advantage of an optimization error with WebKit's matching of regular expressions, which could end with the possibility to execute arbitrary shellcode.
Latest Safari versions are affected
In the case of iOS, the developer says that a vulnerable variant of WebKit exists starting with revision 12.0 of the OS. As for the desktop, if the browser engine is on macOS 10.14 and up, it is exploitable.

"This is an exploit for the latest version of Safari (as of Dec. 6 2018). Fixed in the current WebKit release, therefore I decided to make this public," Henze emphasizes on GitHub, where he offers details about how to make it work.
The potential for damage
But the PoC makes it possible to execute shellcode inside Apple's browser and enable an attacker to do everything Safari is allowed to do. One plausible scenario is to bypass the same-origin policy (SOP) the browser uses to restrict resources from different origins to interact with each other.
Click to expand...

ProTruckDriver · Dec 8, 2018

This is starting to get old with Apple. Lately when Apple updates or upgrades security holes are found.

Log in or Sign up

WebKit Vulnerability Affects Latest Versions of Apple Safari

guest Guest

ProTruckDriver Registered Member

Log in or Sign up

WebKit Vulnerability Affects Latest Versions of Apple Safari

guest Guest

ProTruckDriver Registered Member

Useful Searches