Remote Yes

Type Arbitrary code execution

Description

An issue has been found in the “WebKit Web Inspector” component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

AVG-234 webkitgtk, webkitgtk2 2.4.11-6 Critical Unknown

AVG-235 webkit2gtk 2.14.5-1 2.16.1-1 Critical Fixed

28 Apr 2017 ASA-201704-9 AVG-235 webkit2gtk Critical multiple issues

https://webkitgtk.org/security/WSA-2017-0003.html