Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
8.8
CVSSv3

CVE-2020-13558

Published: 03/03/2021 Updated: 30/07/2022
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Subscribe to Webkitgtk

Vulnerability Summary

A code execution vulnerability exists in the AudioSourceProviderGStreamer functionality of Webkit WebKitGTK 2.30.1. A specially crafted web page can lead to a use after free.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

webkitgtk webkitgtk 2.30.1

Vendor Advisories

Debian Security Advisories: DSA-4854-1 webkit2gtk -- security update
The following vulnerabilities have been discovered in the webkit2gtk web engine: CVE-2020-13558 Marcin Noga discovered that processing maliciously crafted web content may lead to arbitrary code execution For the stable distribution (buster), this problem has been fixed in version 2305-1~deb10u1 We recommend that you upgrade your webki ...
Arch Linux Issues:
A use after free issue was found in WebKitGTK and WPE WebKit before version 2305 in the AudioSourceProviderGStreamer class Processing maliciously crafted web content may lead to arbitrary code execution ...

Mailing Lists

Full Disclosure: WebKitGTK and WPE WebKit Security Advisory WSA-2021-0001
<!--X-Body-Begin--> <!--X-User-Header--> oss-sec mailing list archives <!--X-User-Header-End--> <!--X-TopPNI--> By Date By Thread </form> <!--X-TopPNI-End--> <!--X-MsgBody--> <!--X-Subject-Header-Begin--> WebKitGTK and WPE WebKit Security Advisory WSA-2021-0001 <!--X-Subject-Header-End--> <!--X-Head-of-Message--> From: Carlos A ...

References

CWE-416https://talosintelligence.com/vulnerability_reports/TALOS-2020-1172https://security.gentoo.org/glsa/202104-03https://nvd.nist.govhttps://www.debian.org/security/2021/dsa-4854
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-30924CVE-2024-3400overflowCVE-2024-23528CVE-2024-21338CVE-2024-3818CVE-2024-23535NULL pointer dereferenceelevation of privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook