Test ID:	1.3.6.1.4.1.25623.1.0.843564
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-3687-1)
Summary:	The remote host is missing an update for the 'webkit2gtk' package(s) announced via the USN-3687-1 advisory.
Description:	Summary: The remote host is missing an update for the 'webkit2gtk' package(s) announced via the USN-3687-1 advisory. Vulnerability Insight: A large number of security issues were discovered in the WebKitGTK+ Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service attacks, and arbitrary code execution. Affected Software/OS: 'webkit2gtk' package(s) on Ubuntu 16.04, Ubuntu 17.10, Ubuntu 18.04. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2018-12293 Bugtraq: 20180614 WebKitGTK+ and WPE WebKit Security Advisory WSA-2018-0005 (Google Search) http://www.securityfocus.com/archive/1/542087/100/0/threaded https://www.exploit-db.com/exploits/45205/ https://security.gentoo.org/glsa/201808-04 http://packetstormsecurity.com/files/148200/WebKitGTK-Data-Leak-Code-Execution.html https://bugs.webkit.org/show_bug.cgi?id=186384 https://trac.webkit.org/changeset/232618 http://www.openwall.com/lists/oss-security/2018/06/14/1 https://usn.ubuntu.com/3687-1/ Common Vulnerability Exposure (CVE) ID: CVE-2018-4190 http://www.securitytracker.com/id/1041029 Common Vulnerability Exposure (CVE) ID: CVE-2018-4199 Common Vulnerability Exposure (CVE) ID: CVE-2018-4218 https://www.exploit-db.com/exploits/44861/ https://bugs.chromium.org/p/project-zero/issues/detail?id=1553 Common Vulnerability Exposure (CVE) ID: CVE-2018-4222 https://www.exploit-db.com/exploits/44859/ https://bugs.chromium.org/p/project-zero/issues/detail?id=1545 Common Vulnerability Exposure (CVE) ID: CVE-2018-4232 Common Vulnerability Exposure (CVE) ID: CVE-2018-4233 https://www.exploit-db.com/exploits/45998/ http://packetstormsecurity.com/files/153148/Safari-Webkit-Proxy-Object-Type-Confusion.html
Copyright	Copyright (C) 2018 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.