CVE-2017-5949: Critical severity Safari vulnerability

Published Apr 3, 2017

Updated

JavaScriptCore in WebKit, as distributed in Safari Technology Preview Release 22, allows remote attackers to cause a denial of service (heap-based out-of-bounds write and application crash) or possibly have unspecified other impact via crafted JavaScript code that triggers access to red-zone memory locations, related to jit/ThunkGenerators.cpp, llint/LowLevelInterpreter3264.asm, and llint/LowLevelInterpreter64.asm.

Affected Software

1 affected component

Safari=22

Event History

Apr 3, 2017

CVE Published

via MITRE·05:44 AM

Data Sourced

via MITRE·05:44 AM

Description

Data Sourced

via NVD·05:59 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2017-5949?

CVE-2017-5949 has a high severity level due to its potential to cause a denial of service through heap-based out-of-bounds write.

How do I fix CVE-2017-5949?

To fix CVE-2017-5949, update Safari Technology Preview to the latest version available.

What software is affected by CVE-2017-5949?

CVE-2017-5949 specifically affects Safari Technology Preview Release 22.

What type of vulnerability is CVE-2017-5949?

CVE-2017-5949 is a heap-based out-of-bounds write vulnerability in JavaScriptCore components.

Can CVE-2017-5949 be exploited remotely?

Yes, CVE-2017-5949 can be exploited remotely through crafted JavaScript code.