WebKit contains an out-of-bounds read flaw that is triggered as SimplifiedBackwardsTextIterator may return an incorrect offset with a first-letter rule. With a specially crafted web page, a context-dependent attacker can cause a crash and potentially disclose memory content.
Classification
Location:
Context Dependent
Attack Type:
Information Disclosure,
Input Manipulation
Impact:
Loss of Confidentiality,
Loss of Availability
Solution:
Patch / RCS
Exploit:
PoC Public
Disclosure:
Vendor Verified,
Coordinated Disclosure
OSVDB:
Web Related
Solution
The vendor has released a patch to address this vulnerability. There are no known workarounds or upgrades to correct this issue. Check the vendor advisory, changelog, or solution in the references section for details.
