Medium WID-SEC-2023-2531 1 CVE

Microsoft Edge: Schwachstelle ermöglicht Denial of Service

Published Oct 1, 2023 · Updated Oct 1, 2023 · de-DE

Vendor: Microsoft Product: Edge Product: Edge Extended Stable Channel < 116.0.1938.98 Product: Edge Stable < 117.0.2045.47 Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Microsoft Edge ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

Edge ist ein Web Browser von Microsoft.

Vulnerabilities 1

Medium 5.3

CVE-2023-1999 Public exploit

Use after free in libwebp

There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode() function and loop through to free best.bw and assign best = trial pointer. The second loop will then return 0 because of an Out of memory error in VP8 encode…

Chromium libwebp thunderbird mozjs38 Debian Ubuntu Azure Linux Alpine

Jun 20, 2023

Revision history

2023-10-01 #1
Initiale Fassung

References

Microsoft Edge Security Advisory vom 2023-10-01
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-1999