vulnerability

Oracle Solaris 11: CVE-2018-4278: Vulnerability in WebKitGTK+

Severity
4
CVSS
(AV:N/AC:M/Au:N/C:P/I:N/A:N)
Published
Nov 19, 2018
Added
Nov 19, 2018
Modified
Feb 17, 2022

Description

In Safari before 11.1.2, iTunes before 12.8 for Windows, iOS before 11.4.1, tvOS before 11.4.1, iCloud for Windows before 7.6, sound fetched through audio elements may be exfiltrated cross-origin. This issue was addressed with improved audio taint tracking.

Solutions

oracle-solaris-11-4-upgrade-communication-im-pidgin-2-12-0-11-4-3-0-1-1-0oracle-solaris-11-4-upgrade-library-audio-taglib-1-11-1-11-4-3-0-1-1-0oracle-solaris-11-4-upgrade-library-desktop-webkitgtk4-2-20-5-11-4-3-0-1-1-0oracle-solaris-11-4-upgrade-x11-library-libx11-1-6-5-11-4-3-0-1-1-0
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.