1146 - WebKit: UXSS via ContainerNode::parserInsertBefore - project-zero

Starred by 2 users

Status:	Fixed
Owner:	lokihardt@google.com
Closed:	May 2017
Cc:	project-...@google.com
Deadline-90 Vendor-Apple CCProjectZeroMembers Severity-High Product-WebKit Finder-lokihardt Reported-2017-Feb-23 CVE-2017-2508

WebKit: UXSS via ContainerNode::parserInsertBefore

Project Member Reported by lokihardt@google.com, Feb 24 2017

Back to list

This is a regression test from  https://crbug.com/519558 .

The PoC works well in the latest nightly build of WebKit.


This bug is subject to a 90 day disclosure deadline. After 90 days elapse
or a patch has been made broadly available, the bug report will become
visible to the public.

Project Member Comment 1 by lokihardt@google.com, Apr 7 2017

WebKit Tracker: https://bugs.webkit.org/show_bug.cgi?id=168817

Project Member Comment 2 by lokihardt@google.com, May 18 2017

Status: Fixed

Project Member Comment 3 by lokihardt@google.com, May 24 2017

Labels: -Restrict-View-Commit CVE-2017-2508

► Sign in to add a comment