An API abuse issue exists in WebKit's handling of libxml contexts. Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution. This issue is addressed through improved handling of libxml context objects. References: Bugzilla: https://bugs.webkit.org/show_bug.cgi?id=36000 Trac: http://trac.webkit.org/changeset/56420 Acknowledgements: Red Hat would like to thank Drew Yao of Apple Product Security for responsibly reporting this issue. Upstream acknowledges Aki Helin of OUSPG as the original reporter.
Public via: [1] http://support.apple.com/kb/HT4196