首页 AI 资讯 技术前沿 KnowSafe 安全预警:webkitgtk恶意Web内容导致任意代码执行
技术前沿

KnowSafe 安全预警:webkitgtk恶意Web内容导致任意代码执行

KnowSafe 安全预警:KnowSafe 安全团队监测到编号 AVD-2019-8558 的安全漏洞(危害等级:高危)已公开披露,相关用户应尽快排查并完成修复。

漏洞介绍

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.

影响范围

应用:apple icloud(影响面 Up to (excluding) 7.11)

应用:apple itunes(影响面 Up to (excluding) 12.9.4)

应用:apple safari(影响面 Up to (excluding) 12.1)

系统:alibaba_cloud_linux_2.1903 webkitgtk4(影响面 Up to (excluding) 2.28.2-2.1.al7)

系统:alma_linux_8 pidgin(影响面 Up to (excluding) 2.13.0-5.el8)

系统:alpine_3.10 webkit2gtk(影响面 Up to (excluding) 2.24.1-r0)

系统:alpine_3.11 webkit2gtk(影响面 Up to (excluding) 2.24.1-r0)

系统:alpine_3.12 webkit2gtk(影响面 Up to (excluding) 2.24.1-r0)

……另有 24 项受影响环境,详见官方公告

解决方案

安装官方补丁

参考信息

https://support.apple.com/HT209599

https://support.apple.com/HT209601

https://support.apple.com/HT209602

https://support.apple.com/HT209603

https://support.apple.com/HT209604

KnowSafe 将持续跟踪该漏洞的利用情况与修复进展,如需漏洞管理与应急响应支持,欢迎联系 KnowSafe 安全团队。