According to security researchers at Cisco Talos, the WebKit browser engine is currently vulnerable to several vulnerabilities. Some of them could allow attackers to perform remote code executionby convincing the targeted user to visit malicious sites.
WebKit is an open source engine created by Apple and used by the Safari browser and other Apple, as well as many other applications for macOS, iOS, and Linux. It is also used by the BlackBerry Browser and Play Station consoles.
Cisco Talos revealed on Monday that one of its researchers identified several vulnerabilities, all of high severity, that could be exploited for remote code execution by causing a targeted user to visit a specially crafted site with a browser that uses WebKit.
The vulnerabilities are related to WebKit's WebSocket, AudioSourceProviderGStreamer, and ImageDecoderGStreamer functionality.
According to Talos, the serious remote code execution vulnerabilities were reported this fall and patched earlier this month. Researchers have given them the names: CVE CVE-2020-13584, CVE-2020-13558 , and CVE-2020-13543.
A security advisory published last week by the developers of WebKitGTK (a full-featured port of WebKit) and WPE (a WebKit port for low-power devices ) reports two code execution vulnerabilities discovered by Talos. One of the vulnerabilities was disclosed now, and the other in September. As we mentioned above, in September, several other bugs were reported by researchers
Talos has published detailed technical reports for each of these vulnerabilities and has made SNORT rules to help customers detect exploitation attempts.
Apple will likely patch the latest WebKit vulnerabilities with the release of the next software updates.
Source: Security Week
