Candidate: CVE-2013-7324
PublicDate: 2020-02-17 19:15:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7324
 http://www.openwall.com/lists/oss-security/2014/02/10
Description:
 Webkit-GTK 2.x (any version with HTML5 audio/video support based on
 GStreamer) allows remote attackers to trigger unexpectedly high sound
 volume via malicious javascript. NOTE: this WebKit-GTK behavior complies
 with existing W3C standards and existing practices for GNOME desktop
 integration.
Ubuntu-Description:
Notes:
 jdstrand> webkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8
Bugs:
Priority: low
Discovered-by:
Assigned-to:
CVSS:
 nvd: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N [5.3 MEDIUM]

Patches_webkit:
upstream_webkit: needs-triage
lucid_webkit: ignored (reached end-of-life)
precise_webkit: ignored (no update available)
quantal_webkit: ignored (reached end-of-life)
saucy_webkit: ignored (reached end-of-life)
trusty_webkit: DNE
trusty/esm_webkit: DNE
utopic_webkit: DNE
vivid_webkit: DNE
vivid/stable-phone-overlay_webkit: DNE
vivid/ubuntu-core_webkit: DNE
wily_webkit: DNE
xenial_webkit: DNE
yakkety_webkit: DNE
devel_webkit: DNE

Patches_webkitgtk:
upstream_webkitgtk: needs-triage
lucid_webkitgtk: DNE
precise_webkitgtk: DNE
quantal_webkitgtk: DNE
saucy_webkitgtk: DNE
trusty_webkitgtk: not-affected (2.4.8-1ubuntu1~ubuntu14.04.1)
trusty/esm_webkitgtk: DNE (trusty was not-affected [2.4.8-1ubuntu1~ubuntu14.04.1])
utopic_webkitgtk: ignored (reached end-of-life)
vivid_webkitgtk: ignored (reached end-of-life)
vivid/stable-phone-overlay_webkitgtk: DNE
vivid/ubuntu-core_webkitgtk: DNE
wily_webkitgtk: not-affected (2.4.9-2ubuntu2)
xenial_webkitgtk: not-affected (2.4.9-2ubuntu2)
yakkety_webkitgtk: not-affected (2.4.9-2ubuntu2)
devel_webkitgtk: not-affected (2.4.9-2ubuntu2)