CVE-2024-27830
Overview
Advisory: Apple Security Advisory
Impact:
Description: A maliciously crafted webpage may be able to fingerprint the user
Researchers: Joe Rutkowski (@Joe12387) of Crawless and @abrahamjuliot
| Attribute | Value |
|---|---|
| CVE | CVE-2024-27830 |
| Bugzilla | 271159 |
| Component | WTF |
| Bug Class | LogicError |
| Severity | medium |
| Commit | 89ae804c9d89d646… |
| Advisory | Apple Advisory |
Root Cause Analysis
This issue was addressed through improved state management.
Files Changed
Source Files
Source/WTF/wtf/PlatformEnable.h
Patch Preview
diff --git a/Source/WTF/wtf/PlatformEnable.h b/Source/WTF/wtf/PlatformEnable.h
index 38d367cb578c..eef9de469a96 100644
--- a/Source/WTF/wtf/PlatformEnable.h
+++ b/Source/WTF/wtf/PlatformEnable.h
@@ -421,10 +421,6 @@
#define ENABLE_MOUSE_FORCE_EVENTS 1
#endif
-#if !defined(ENABLE_NETSCAPE_PLUGIN_METADATA_CACHE)
-#define ENABLE_NETSCAPE_PLUGIN_METADATA_CACHE 0
-#endif
-
#if !defined(ENABLE_NOTIFICATION_EVENT)
#define ENABLE_NOTIFICATION_EVENT 0
#endif