NVD

Id
84712  
Name
CVE-2017-5949  
Description
JavaScriptCore in WebKit, as distributed in Safari Technology Preview Release 22, allows remote attackers to cause a denial of service (heap-based out-of-bounds write and application crash) or possibly have unspecified other impact via crafted JavaScript code that triggers access to red-zone memory locations, related to jit/ThunkGenerators.cpp, llint/LowLevelInterpreter32_64.asm, and llint/LowLevelInterpreter64.asm.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-04-27  
Published
2017-04-03  
Modified Date
2017-04-10  
Seq
2017-5949  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
417535 84712 CVE-2017-2485 97132  View
417536 84712 CVE-2017-2485 http://www.talosintelligence.com/reports/TALOS-2017-0296/  View
417537 84712 CVE-2017-2485 https://support.apple.com/HT207601  View
417538 84712 CVE-2017-2485 https://support.apple.com/HT207602  View
417539 84712 CVE-2017-2485 https://support.apple.com/HT207615  View
417540 84712 CVE-2017-2485 https://support.apple.com/HT207617  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
66636 JVNDB-2017-002961 Safari Technology Preview などで配布される WebKit の JavaScriptCore におけるサービス運用妨害 (DoS) の脆弱性 Safari Technology Preview などで配布される WebKit の JavaScriptCore には、jit/ThunkGenerators.cpp、llint/LowLevelInterpreter32_64.asm、および llint/LowLevelInterpreter64.asm に関する処理に不備があるため、サービス運用妨害 (ヒープベースの境界外書き込みおよびアプリケーションクラッシュ) 状態にされるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2017-5949 0 CVE-2017-5949 84712 7.5 9.8 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-002961.html 2017-02-01 2017-05-09 View