RHSA-2011_0177
Vulnerability from csaf_redhat - Published: 2011-01-25 17:06 - Updated: 2024-11-22 04:04Use-after-free vulnerability in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to element focus.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-optional:webkitgtk-0:1.2.6-2.el6_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional:webkitgtk-0:1.2.6-2.el6_0.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional:webkitgtk-0:1.2.6-2.el6_0.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional:webkitgtk-0:1.2.6-2.el6_0.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional:webkitgtk-0:1.2.6-2.el6_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional:webkitgtk-0:1.2.6-2.el6_0.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional:webkitgtk-0:1.2.6-2.el6_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional:webkitgtk-debuginfo-0:1.2.6-2.el6_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional:webkitgtk-debuginfo-0:1.2.6-2.el6_0.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional:webkitgtk-debuginfo-0:1.2.6-2.el6_0.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional:webkitgtk-debuginfo-0:1.2.6-2.el6_0.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional:webkitgtk-debuginfo-0:1.2.6-2.el6_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional:webkitgtk-debuginfo-0:1.2.6-2.el6_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional:webkitgtk-devel-0:1.2.6-2.el6_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional:webkitgtk-devel-0:1.2.6-2.el6_0.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional:webkitgtk-devel-0:1.2.6-2.el6_0.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional:webkitgtk-devel-0:1.2.6-2.el6_0.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional:webkitgtk-devel-0:1.2.6-2.el6_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional:webkitgtk-devel-0:1.2.6-2.el6_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional:webkitgtk-doc-0:1.2.6-2.el6_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional:webkitgtk-doc-0:1.2.6-2.el6_0.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional:webkitgtk-doc-0:1.2.6-2.el6_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional:webkitgtk-doc-0:1.2.6-2.el6_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client:webkitgtk-0:1.2.6-2.el6_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client:webkitgtk-0:1.2.6-2.el6_0.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client:webkitgtk-0:1.2.6-2.el6_0.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client:webkitgtk-0:1.2.6-2.el6_0.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client:webkitgtk-0:1.2.6-2.el6_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client:webkitgtk-0:1.2.6-2.el6_0.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client:webkitgtk-0:1.2.6-2.el6_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client:webkitgtk-debuginfo-0:1.2.6-2.el6_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client:webkitgtk-debuginfo-0:1.2.6-2.el6_0.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client:webkitgtk-debuginfo-0:1.2.6-2.el6_0.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client:webkitgtk-debuginfo-0:1.2.6-2.el6_0.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client:webkitgtk-debuginfo-0:1.2.6-2.el6_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client:webkitgtk-debuginfo-0:1.2.6-2.el6_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client:webkitgtk-devel-0:1.2.6-2.el6_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client:webkitgtk-devel-0:1.2.6-2.el6_0.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client:webkitgtk-devel-0:1.2.6-2.el6_0.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client:webkitgtk-devel-0:1.2.6-2.el6_0.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client:webkitgtk-devel-0:1.2.6-2.el6_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client:webkitgtk-devel-0:1.2.6-2.el6_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client:webkitgtk-doc-0:1.2.6-2.el6_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client:webkitgtk-doc-0:1.2.6-2.el6_0.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client:webkitgtk-doc-0:1.2.6-2.el6_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client:webkitgtk-doc-0:1.2.6-2.el6_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional:webkitgtk-0:1.2.6-2.el6_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional:webkitgtk-0:1.2.6-2.el6_0.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional:webkitgtk-0:1.2.6-2.el6_0.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional:webkitgtk-0:1.2.6-2.el6_0.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional:webkitgtk-0:1.2.6-2.el6_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional:webkitgtk-0:1.2.6-2.el6_0.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional:webkitgtk-0:1.2.6-2.el6_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional:webkitgtk-debuginfo-0:1.2.6-2.el6_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional:webkitgtk-debuginfo-0:1.2.6-2.el6_0.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional:webkitgtk-debuginfo-0:1.2.6-2.el6_0.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional:webkitgtk-debuginfo-0:1.2.6-2.el6_0.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional:webkitgtk-debuginfo-0:1.2.6-2.el6_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional:webkitgtk-debuginfo-0:1.2.6-2.el6_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional:webkitgtk-devel-0:1.2.6-2.el6_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional:webkitgtk-devel-0:1.2.6-2.el6_0.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional:webkitgtk-devel-0:1.2.6-2.el6_0.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional:webkitgtk-devel-0:1.2.6-2.el6_0.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional:webkitgtk-devel-0:1.2.6-2.el6_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional:webkitgtk-devel-0:1.2.6-2.el6_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional:webkitgtk-doc-0:1.2.6-2.el6_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional:webkitgtk-doc-0:1.2.6-2.el6_0.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional:webkitgtk-doc-0:1.2.6-2.el6_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional:webkitgtk-doc-0:1.2.6-2.el6_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional:webkitgtk-0:1.2.6-2.el6_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional:webkitgtk-0:1.2.6-2.el6_0.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional:webkitgtk-0:1.2.6-2.el6_0.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional:webkitgtk-0:1.2.6-2.el6_0.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional:webkitgtk-0:1.2.6-2.el6_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional:webkitgtk-0:1.2.6-2.el6_0.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional:webkitgtk-0:1.2.6-2.el6_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional:webkitgtk-debuginfo-0:1.2.6-2.el6_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional:webkitgtk-debuginfo-0:1.2.6-2.el6_0.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional:webkitgtk-debuginfo-0:1.2.6-2.el6_0.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional:webkitgtk-debuginfo-0:1.2.6-2.el6_0.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional:webkitgtk-debuginfo-0:1.2.6-2.el6_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional:webkitgtk-debuginfo-0:1.2.6-2.el6_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional:webkitgtk-devel-0:1.2.6-2.el6_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional:webkitgtk-devel-0:1.2.6-2.el6_0.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional:webkitgtk-devel-0:1.2.6-2.el6_0.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional:webkitgtk-devel-0:1.2.6-2.el6_0.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional:webkitgtk-devel-0:1.2.6-2.el6_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional:webkitgtk-devel-0:1.2.6-2.el6_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional:webkitgtk-doc-0:1.2.6-2.el6_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional:webkitgtk-doc-0:1.2.6-2.el6_0.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional:webkitgtk-doc-0:1.2.6-2.el6_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional:webkitgtk-doc-0:1.2.6-2.el6_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server:webkitgtk-0:1.2.6-2.el6_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server:webkitgtk-0:1.2.6-2.el6_0.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server:webkitgtk-0:1.2.6-2.el6_0.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server:webkitgtk-0:1.2.6-2.el6_0.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server:webkitgtk-0:1.2.6-2.el6_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server:webkitgtk-0:1.2.6-2.el6_0.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server:webkitgtk-0:1.2.6-2.el6_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server:webkitgtk-debuginfo-0:1.2.6-2.el6_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server:webkitgtk-debuginfo-0:1.2.6-2.el6_0.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server:webkitgtk-debuginfo-0:1.2.6-2.el6_0.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server:webkitgtk-debuginfo-0:1.2.6-2.el6_0.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server:webkitgtk-debuginfo-0:1.2.6-2.el6_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server:webkitgtk-debuginfo-0:1.2.6-2.el6_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server:webkitgtk-devel-0:1.2.6-2.el6_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server:webkitgtk-devel-0:1.2.6-2.el6_0.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server:webkitgtk-devel-0:1.2.6-2.el6_0.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server:webkitgtk-devel-0:1.2.6-2.el6_0.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server:webkitgtk-devel-0:1.2.6-2.el6_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server:webkitgtk-devel-0:1.2.6-2.el6_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server:webkitgtk-doc-0:1.2.6-2.el6_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server:webkitgtk-doc-0:1.2.6-2.el6_0.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server:webkitgtk-doc-0:1.2.6-2.el6_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server:webkitgtk-doc-0:1.2.6-2.el6_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional:webkitgtk-0:1.2.6-2.el6_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional:webkitgtk-0:1.2.6-2.el6_0.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional:webkitgtk-0:1.2.6-2.el6_0.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional:webkitgtk-0:1.2.6-2.el6_0.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional:webkitgtk-0:1.2.6-2.el6_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional:webkitgtk-0:1.2.6-2.el6_0.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional:webkitgtk-0:1.2.6-2.el6_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional:webkitgtk-debuginfo-0:1.2.6-2.el6_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional:webkitgtk-debuginfo-0:1.2.6-2.el6_0.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional:webkitgtk-debuginfo-0:1.2.6-2.el6_0.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional:webkitgtk-debuginfo-0:1.2.6-2.el6_0.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional:webkitgtk-debuginfo-0:1.2.6-2.el6_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional:webkitgtk-debuginfo-0:1.2.6-2.el6_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional:webkitgtk-devel-0:1.2.6-2.el6_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional:webkitgtk-devel-0:1.2.6-2.el6_0.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional:webkitgtk-devel-0:1.2.6-2.el6_0.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional:webkitgtk-devel-0:1.2.6-2.el6_0.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional:webkitgtk-devel-0:1.2.6-2.el6_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional:webkitgtk-devel-0:1.2.6-2.el6_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional:webkitgtk-doc-0:1.2.6-2.el6_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional:webkitgtk-doc-0:1.2.6-2.el6_0.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional:webkitgtk-doc-0:1.2.6-2.el6_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional:webkitgtk-doc-0:1.2.6-2.el6_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation:webkitgtk-0:1.2.6-2.el6_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation:webkitgtk-0:1.2.6-2.el6_0.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation:webkitgtk-0:1.2.6-2.el6_0.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation:webkitgtk-0:1.2.6-2.el6_0.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation:webkitgtk-0:1.2.6-2.el6_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation:webkitgtk-0:1.2.6-2.el6_0.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation:webkitgtk-0:1.2.6-2.el6_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation:webkitgtk-debuginfo-0:1.2.6-2.el6_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation:webkitgtk-debuginfo-0:1.2.6-2.el6_0.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation:webkitgtk-debuginfo-0:1.2.6-2.el6_0.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation:webkitgtk-debuginfo-0:1.2.6-2.el6_0.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation:webkitgtk-debuginfo-0:1.2.6-2.el6_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation:webkitgtk-debuginfo-0:1.2.6-2.el6_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation:webkitgtk-devel-0:1.2.6-2.el6_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation:webkitgtk-devel-0:1.2.6-2.el6_0.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation:webkitgtk-devel-0:1.2.6-2.el6_0.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation:webkitgtk-devel-0:1.2.6-2.el6_0.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation:webkitgtk-devel-0:1.2.6-2.el6_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation:webkitgtk-devel-0:1.2.6-2.el6_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation:webkitgtk-doc-0:1.2.6-2.el6_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation:webkitgtk-doc-0:1.2.6-2.el6_0.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation:webkitgtk-doc-0:1.2.6-2.el6_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation:webkitgtk-doc-0:1.2.6-2.el6_0.x86_64 | — |
Vendor Fix
fix
|
WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to the rendering of an inline element.
WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; does not properly handle dynamic modification of a text node, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document.
The counters functionality in the Cascading Style Sheets (CSS) implementation in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document.
WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; accesses uninitialized memory during processing of the (1) :first-letter and (2) :first-line pseudo-elements in an SVG text element, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted document.
Use-after-free vulnerability in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a foreignObject element in an SVG document.
WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a floating element in an SVG document.
WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a use element in an SVG document.
WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; does not properly handle just-in-time (JIT) compiled JavaScript stubs, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted HTML document, related to a "reentrancy issue."
WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted regular expression.
Multiple use-after-free vulnerabilities in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a (1) font-face or (2) use element in an SVG document.
WebKit in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2; Android before 2.2; and webkitgtk before 1.2.6; does not properly validate floating-point data, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted HTML document, related to non-standard NaN representation.
Use-after-free vulnerability in WebKit in Apple iOS before 4.1 on the iPhone and iPod touch, and webkitgtk before 1.2.6, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving selections.
WebKit in Apple iOS before 4.1 on the iPhone and iPod touch, and webkitgtk before 1.2.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors involving form menus.
Use-after-free vulnerability in WebKit in Apple iOS before 4.1 on the iPhone and iPod touch, and webkitgtk before 1.2.6, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving scrollbars.
Google Chrome before 5.0.375.127, and webkitgtk before 1.2.5, does not properly handle SVG documents, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors related to state changes when using DeleteButtonController.
The text-editing implementation in Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6, does not check a node type before performing a cast, which has unspecified impact and attack vectors related to (1) DeleteSelectionCommand.cpp, (2) InsertLineBreakCommand.cpp, or (3) InsertParagraphSeparatorCommand.cpp in WebCore/editing/.
Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6, does not properly implement the history feature, which might allow remote attackers to spoof the address bar via unspecified vectors.
Multiple use-after-free vulnerabilities in WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6, allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to improper handling of MIME types by plug-ins.
Google Chrome before 5.0.375.127 and webkitgtk before 1.2.6 do not properly support the Ruby language, which allows attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
Google Chrome before 6.0.472.53 and webkitgtk before 1.2.6 do not properly handle counter nodes, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 6.0.472.53, and webkitgtk before 1.2.6, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving element focus.
WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 6.0.472.53, and webkitgtk before 1.2.6, does not properly restrict read access to images derived from CANVAS elements, which allows remote attackers to bypass the Same Origin Policy and obtain potentially sensitive image data via a crafted web site.
Integer overflow in the Text::wholeText method in dom/Text.cpp in WebKit, as used in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4; webkitgtk before 1.2.6; and possibly other products allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving Text objects.
The WebCore::HTMLLinkElement::process function in WebCore/html/HTMLLinkElement.cpp in WebKit, as used in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4; webkitgtk before 1.2.6; and possibly other products does not verify whether DNS prefetching is enabled when processing an HTML LINK element, which allows remote attackers to bypass intended access restrictions, as demonstrated by an HTML e-mail message that uses a LINK element for X-Confirm-Reading-To functionality.
Use-after-free vulnerability in WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving text editing.
WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, does not properly handle large text areas, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted HTML document.
WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, accesses a frame object after this object has been destroyed, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
Array index error in the FEBlend::apply function in WebCore/platform/graphics/filters/FEBlend.cpp in WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted SVG document, related to effects in the application of filters.
The CSSParser::parseFontFaceSrc function in WebCore/css/CSSParser.cpp in WebKit, as used in Google Chrome before 8.0.552.224, Chrome OS before 8.0.552.343, webkitgtk before 1.2.6, and other products does not properly parse Cascading Style Sheets (CSS) token sequences, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted local font, related to "Type Confusion."
Loading 1.1 MB of JSON…
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.