Bug 1179911 (CVE-2020-9952)

Summary:	VUL-0: CVE-2020-9952: webkitgtk,webkitgtk3: input validation issue may lead to a cross site scripting
Product:	[Novell Products] SUSE Security Incidents	Reporter:	Wolfgang Frisch <wolfgang.frisch>
Component:	Incidents	Assignee:	Security Team bot <security-team>
Status:	RESOLVED DUPLICATE	QA Contact:	Security Team bot <security-team>
Severity:	Normal
Priority:	P5 - None	CC:	smash_bz
Version:	unspecified
Target Milestone:	---
Hardware:	Other
OS:	Other
URL:	https://smash.suse.de/issue/269461/
Whiteboard:
Found By:	Security Response Team	Services Priority:
Business Priority:		Blocker:	---
Marketing QA Status:	---	IT Deployment:	---

Description Wolfgang Frisch 2020-12-10 17:22:44 UTC

CVE-2020-9952

A flaw was found in WebKitGTK. An input validation issue was addressed with improved input validation. Processing maliciously crafted web content may lead to a cross site scripting attack.

Reference:
https://webkitgtk.org/security/WSA-2020-0008.html

References:
https://bugzilla.redhat.com/show_bug.cgi?id=1901219
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-9952
http://seclists.org/oss-sec/2020/q4/156
http://www.openwall.com/lists/oss-security/2020/11/23/3
https://access.redhat.com/security/cve/CVE-2020-9952
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9952
https://support.apple.com/HT211847
http://seclists.org/fulldisclosure/2020/Nov/20
http://seclists.org/fulldisclosure/2020/Nov/22
http://seclists.org/fulldisclosure/2020/Nov/19
http://seclists.org/fulldisclosure/2020/Nov/18
https://support.apple.com/HT211850
https://support.apple.com/HT211844
https://support.apple.com/HT211845
https://support.apple.com/HT211843
https://support.apple.com/HT211846

Comment 1 Wolfgang Frisch 2020-12-10 17:26:56 UTC

duplicate of bsc#1179122

*** This bug has been marked as a duplicate of bug 1179122 ***