CVE-2017-17821: Buffer Overflow

Published Dec 21, 2017

Updated

WTF/wtf/FastBitVector.h in WebKit, as distributed in Safari Technology Preview Release 46, allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact because it calls the FastBitVectorWordOwner::resizeSlow function (in WTF/wtf/FastBitVector.cpp) for a purpose other than initializing a bitvector size, and resizeSlow mishandles cases where the old array length is greater than the new array length.

Affected Software

1 affected component

Safari=46

Event History

Dec 21, 2017

CVE Published

via MITRE·03:00 AM

Data Sourced

via MITRE·03:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2017-17821?

CVE-2017-17821 is classified as a denial of service vulnerability that can result from a buffer overflow.

What software is affected by CVE-2017-17821?

CVE-2017-17821 affects Safari Technology Preview Release 46.

How do I fix CVE-2017-17821?

To address CVE-2017-17821, users should update to a newer version of Safari that has mitigated this vulnerability.

What impact can CVE-2017-17821 have?

CVE-2017-17821 can lead to denial of service and potentially other unspecified impacts.

Who can exploit CVE-2017-17821?

Remote attackers can exploit CVE-2017-17821 to execute a denial of service attack.