GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

RHSA-2011_0177

Vulnerability from csaf_redhat - Published: 2011-01-25 17:06 - Updated: 2024-11-22 04:04
Summary
Red Hat Security Advisory: webkitgtk security update
Severity
Moderate
Notes
Topic: Updated webkitgtk packages that fix several security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.
Details: WebKitGTK+ is the port of the portable web rendering engine WebKit to the GTK+ platform. Multiple memory corruption flaws were found in WebKit. Malicious web content could cause an application using WebKitGTK+ to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2010-1782, CVE-2010-1783, CVE-2010-1784, CVE-2010-1785, CVE-2010-1787, CVE-2010-1788, CVE-2010-1790, CVE-2010-1792, CVE-2010-1807, CVE-2010-1814, CVE-2010-3114, CVE-2010-3116, CVE-2010-3119, CVE-2010-3255, CVE-2010-3812, CVE-2010-4198) Multiple use-after-free flaws were found in WebKit. Malicious web content could cause an application using WebKitGTK+ to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2010-1780, CVE-2010-1786, CVE-2010-1793, CVE-2010-1812, CVE-2010-1815, CVE-2010-3113, CVE-2010-3257, CVE-2010-4197, CVE-2010-4204) Two array index errors, leading to out-of-bounds memory reads, were found in WebKit. Malicious web content could cause an application using WebKitGTK+ to crash. (CVE-2010-4206, CVE-2010-4577) A flaw in WebKit could allow malicious web content to trick a user into thinking they are visiting the site reported by the location bar, when the page is actually content controlled by an attacker. (CVE-2010-3115) It was found that WebKit did not correctly restrict read access to images created from the "canvas" element. Malicious web content could allow a remote attacker to bypass the same-origin policy and potentially access sensitive image data. (CVE-2010-3259) A flaw was found in the way WebKit handled DNS prefetching. Even when it was disabled, web content containing certain "link" elements could cause WebKitGTK+ to perform DNS prefetching. (CVE-2010-3813) Users of WebKitGTK+ should upgrade to these updated packages, which contain WebKitGTK+ version 1.2.6, and resolve these issues. All running applications that use WebKitGTK+ must be restarted for this update to take effect.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

Use-after-free vulnerability in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to element focus.

Affected products
Product Identifier Version Remediation
Unresolved product id: 6Client-optional:webkitgtk-0:1.2.6-2.el6_0.i686
Vendor Fix fix
Unresolved product id: 6Client-optional:webkitgtk-0:1.2.6-2.el6_0.ppc
Vendor Fix fix
Unresolved product id: 6Client-optional:webkitgtk-0:1.2.6-2.el6_0.ppc64
Vendor Fix fix
Unresolved product id: 6Client-optional:webkitgtk-0:1.2.6-2.el6_0.s390
Vendor Fix fix
Unresolved product id: 6Client-optional:webkitgtk-0:1.2.6-2.el6_0.s390x
Vendor Fix fix
Unresolved product id: 6Client-optional:webkitgtk-0:1.2.6-2.el6_0.src
Vendor Fix fix
Unresolved product id: 6Client-optional:webkitgtk-0:1.2.6-2.el6_0.x86_64
Vendor Fix fix
Unresolved product id: 6Client-optional:webkitgtk-debuginfo-0:1.2.6-2.el6_0.i686
Vendor Fix fix
Unresolved product id: 6Client-optional:webkitgtk-debuginfo-0:1.2.6-2.el6_0.ppc
Vendor Fix fix
Unresolved product id: 6Client-optional:webkitgtk-debuginfo-0:1.2.6-2.el6_0.ppc64
Vendor Fix fix
Unresolved product id: 6Client-optional:webkitgtk-debuginfo-0:1.2.6-2.el6_0.s390
Vendor Fix fix
Unresolved product id: 6Client-optional:webkitgtk-debuginfo-0:1.2.6-2.el6_0.s390x
Vendor Fix fix
Unresolved product id: 6Client-optional:webkitgtk-debuginfo-0:1.2.6-2.el6_0.x86_64
Vendor Fix fix
Unresolved product id: 6Client-optional:webkitgtk-devel-0:1.2.6-2.el6_0.i686
Vendor Fix fix
Unresolved product id: 6Client-optional:webkitgtk-devel-0:1.2.6-2.el6_0.ppc
Vendor Fix fix
Unresolved product id: 6Client-optional:webkitgtk-devel-0:1.2.6-2.el6_0.ppc64
Vendor Fix fix
Unresolved product id: 6Client-optional:webkitgtk-devel-0:1.2.6-2.el6_0.s390
Vendor Fix fix
Unresolved product id: 6Client-optional:webkitgtk-devel-0:1.2.6-2.el6_0.s390x
Vendor Fix fix
Unresolved product id: 6Client-optional:webkitgtk-devel-0:1.2.6-2.el6_0.x86_64
Vendor Fix fix
Unresolved product id: 6Client-optional:webkitgtk-doc-0:1.2.6-2.el6_0.i686
Vendor Fix fix
Unresolved product id: 6Client-optional:webkitgtk-doc-0:1.2.6-2.el6_0.ppc64
Vendor Fix fix
Unresolved product id: 6Client-optional:webkitgtk-doc-0:1.2.6-2.el6_0.s390x
Vendor Fix fix
Unresolved product id: 6Client-optional:webkitgtk-doc-0:1.2.6-2.el6_0.x86_64
Vendor Fix fix
Unresolved product id: 6Client:webkitgtk-0:1.2.6-2.el6_0.i686
Vendor Fix fix
Unresolved product id: 6Client:webkitgtk-0:1.2.6-2.el6_0.ppc
Vendor Fix fix
Unresolved product id: 6Client:webkitgtk-0:1.2.6-2.el6_0.ppc64
Vendor Fix fix
Unresolved product id: 6Client:webkitgtk-0:1.2.6-2.el6_0.s390
Vendor Fix fix
Unresolved product id: 6Client:webkitgtk-0:1.2.6-2.el6_0.s390x
Vendor Fix fix
Unresolved product id: 6Client:webkitgtk-0:1.2.6-2.el6_0.src
Vendor Fix fix
Unresolved product id: 6Client:webkitgtk-0:1.2.6-2.el6_0.x86_64
Vendor Fix fix
Unresolved product id: 6Client:webkitgtk-debuginfo-0:1.2.6-2.el6_0.i686
Vendor Fix fix
Unresolved product id: 6Client:webkitgtk-debuginfo-0:1.2.6-2.el6_0.ppc
Vendor Fix fix
Unresolved product id: 6Client:webkitgtk-debuginfo-0:1.2.6-2.el6_0.ppc64
Vendor Fix fix
Unresolved product id: 6Client:webkitgtk-debuginfo-0:1.2.6-2.el6_0.s390
Vendor Fix fix
Unresolved product id: 6Client:webkitgtk-debuginfo-0:1.2.6-2.el6_0.s390x
Vendor Fix fix
Unresolved product id: 6Client:webkitgtk-debuginfo-0:1.2.6-2.el6_0.x86_64
Vendor Fix fix
Unresolved product id: 6Client:webkitgtk-devel-0:1.2.6-2.el6_0.i686
Vendor Fix fix
Unresolved product id: 6Client:webkitgtk-devel-0:1.2.6-2.el6_0.ppc
Vendor Fix fix
Unresolved product id: 6Client:webkitgtk-devel-0:1.2.6-2.el6_0.ppc64
Vendor Fix fix
Unresolved product id: 6Client:webkitgtk-devel-0:1.2.6-2.el6_0.s390
Vendor Fix fix
Unresolved product id: 6Client:webkitgtk-devel-0:1.2.6-2.el6_0.s390x
Vendor Fix fix
Unresolved product id: 6Client:webkitgtk-devel-0:1.2.6-2.el6_0.x86_64
Vendor Fix fix
Unresolved product id: 6Client:webkitgtk-doc-0:1.2.6-2.el6_0.i686
Vendor Fix fix
Unresolved product id: 6Client:webkitgtk-doc-0:1.2.6-2.el6_0.ppc64
Vendor Fix fix
Unresolved product id: 6Client:webkitgtk-doc-0:1.2.6-2.el6_0.s390x
Vendor Fix fix
Unresolved product id: 6Client:webkitgtk-doc-0:1.2.6-2.el6_0.x86_64
Vendor Fix fix
Unresolved product id: 6ComputeNode-optional:webkitgtk-0:1.2.6-2.el6_0.i686
Vendor Fix fix
Unresolved product id: 6ComputeNode-optional:webkitgtk-0:1.2.6-2.el6_0.ppc
Vendor Fix fix
Unresolved product id: 6ComputeNode-optional:webkitgtk-0:1.2.6-2.el6_0.ppc64
Vendor Fix fix
Unresolved product id: 6ComputeNode-optional:webkitgtk-0:1.2.6-2.el6_0.s390
Vendor Fix fix
Unresolved product id: 6ComputeNode-optional:webkitgtk-0:1.2.6-2.el6_0.s390x
Vendor Fix fix
Unresolved product id: 6ComputeNode-optional:webkitgtk-0:1.2.6-2.el6_0.src
Vendor Fix fix
Unresolved product id: 6ComputeNode-optional:webkitgtk-0:1.2.6-2.el6_0.x86_64
Vendor Fix fix
Unresolved product id: 6ComputeNode-optional:webkitgtk-debuginfo-0:1.2.6-2.el6_0.i686
Vendor Fix fix
Unresolved product id: 6ComputeNode-optional:webkitgtk-debuginfo-0:1.2.6-2.el6_0.ppc
Vendor Fix fix
Unresolved product id: 6ComputeNode-optional:webkitgtk-debuginfo-0:1.2.6-2.el6_0.ppc64
Vendor Fix fix
Unresolved product id: 6ComputeNode-optional:webkitgtk-debuginfo-0:1.2.6-2.el6_0.s390
Vendor Fix fix
Unresolved product id: 6ComputeNode-optional:webkitgtk-debuginfo-0:1.2.6-2.el6_0.s390x
Vendor Fix fix
Unresolved product id: 6ComputeNode-optional:webkitgtk-debuginfo-0:1.2.6-2.el6_0.x86_64
Vendor Fix fix
Unresolved product id: 6ComputeNode-optional:webkitgtk-devel-0:1.2.6-2.el6_0.i686
Vendor Fix fix
Unresolved product id: 6ComputeNode-optional:webkitgtk-devel-0:1.2.6-2.el6_0.ppc
Vendor Fix fix
Unresolved product id: 6ComputeNode-optional:webkitgtk-devel-0:1.2.6-2.el6_0.ppc64
Vendor Fix fix
Unresolved product id: 6ComputeNode-optional:webkitgtk-devel-0:1.2.6-2.el6_0.s390
Vendor Fix fix
Unresolved product id: 6ComputeNode-optional:webkitgtk-devel-0:1.2.6-2.el6_0.s390x
Vendor Fix fix
Unresolved product id: 6ComputeNode-optional:webkitgtk-devel-0:1.2.6-2.el6_0.x86_64
Vendor Fix fix
Unresolved product id: 6ComputeNode-optional:webkitgtk-doc-0:1.2.6-2.el6_0.i686
Vendor Fix fix
Unresolved product id: 6ComputeNode-optional:webkitgtk-doc-0:1.2.6-2.el6_0.ppc64
Vendor Fix fix
Unresolved product id: 6ComputeNode-optional:webkitgtk-doc-0:1.2.6-2.el6_0.s390x
Vendor Fix fix
Unresolved product id: 6ComputeNode-optional:webkitgtk-doc-0:1.2.6-2.el6_0.x86_64
Vendor Fix fix
Unresolved product id: 6Server-optional:webkitgtk-0:1.2.6-2.el6_0.i686
Vendor Fix fix
Unresolved product id: 6Server-optional:webkitgtk-0:1.2.6-2.el6_0.ppc
Vendor Fix fix
Unresolved product id: 6Server-optional:webkitgtk-0:1.2.6-2.el6_0.ppc64
Vendor Fix fix
Unresolved product id: 6Server-optional:webkitgtk-0:1.2.6-2.el6_0.s390
Vendor Fix fix
Unresolved product id: 6Server-optional:webkitgtk-0:1.2.6-2.el6_0.s390x
Vendor Fix fix
Unresolved product id: 6Server-optional:webkitgtk-0:1.2.6-2.el6_0.src
Vendor Fix fix
Unresolved product id: 6Server-optional:webkitgtk-0:1.2.6-2.el6_0.x86_64
Vendor Fix fix
Unresolved product id: 6Server-optional:webkitgtk-debuginfo-0:1.2.6-2.el6_0.i686
Vendor Fix fix
Unresolved product id: 6Server-optional:webkitgtk-debuginfo-0:1.2.6-2.el6_0.ppc
Vendor Fix fix
Unresolved product id: 6Server-optional:webkitgtk-debuginfo-0:1.2.6-2.el6_0.ppc64
Vendor Fix fix
Unresolved product id: 6Server-optional:webkitgtk-debuginfo-0:1.2.6-2.el6_0.s390
Vendor Fix fix
Unresolved product id: 6Server-optional:webkitgtk-debuginfo-0:1.2.6-2.el6_0.s390x
Vendor Fix fix
Unresolved product id: 6Server-optional:webkitgtk-debuginfo-0:1.2.6-2.el6_0.x86_64
Vendor Fix fix
Unresolved product id: 6Server-optional:webkitgtk-devel-0:1.2.6-2.el6_0.i686
Vendor Fix fix
Unresolved product id: 6Server-optional:webkitgtk-devel-0:1.2.6-2.el6_0.ppc
Vendor Fix fix
Unresolved product id: 6Server-optional:webkitgtk-devel-0:1.2.6-2.el6_0.ppc64
Vendor Fix fix
Unresolved product id: 6Server-optional:webkitgtk-devel-0:1.2.6-2.el6_0.s390
Vendor Fix fix
Unresolved product id: 6Server-optional:webkitgtk-devel-0:1.2.6-2.el6_0.s390x
Vendor Fix fix
Unresolved product id: 6Server-optional:webkitgtk-devel-0:1.2.6-2.el6_0.x86_64
Vendor Fix fix
Unresolved product id: 6Server-optional:webkitgtk-doc-0:1.2.6-2.el6_0.i686
Vendor Fix fix
Unresolved product id: 6Server-optional:webkitgtk-doc-0:1.2.6-2.el6_0.ppc64
Vendor Fix fix
Unresolved product id: 6Server-optional:webkitgtk-doc-0:1.2.6-2.el6_0.s390x
Vendor Fix fix
Unresolved product id: 6Server-optional:webkitgtk-doc-0:1.2.6-2.el6_0.x86_64
Vendor Fix fix
Unresolved product id: 6Server:webkitgtk-0:1.2.6-2.el6_0.i686
Vendor Fix fix
Unresolved product id: 6Server:webkitgtk-0:1.2.6-2.el6_0.ppc
Vendor Fix fix
Unresolved product id: 6Server:webkitgtk-0:1.2.6-2.el6_0.ppc64
Vendor Fix fix
Unresolved product id: 6Server:webkitgtk-0:1.2.6-2.el6_0.s390
Vendor Fix fix
Unresolved product id: 6Server:webkitgtk-0:1.2.6-2.el6_0.s390x
Vendor Fix fix
Unresolved product id: 6Server:webkitgtk-0:1.2.6-2.el6_0.src
Vendor Fix fix
Unresolved product id: 6Server:webkitgtk-0:1.2.6-2.el6_0.x86_64
Vendor Fix fix
Unresolved product id: 6Server:webkitgtk-debuginfo-0:1.2.6-2.el6_0.i686
Vendor Fix fix
Unresolved product id: 6Server:webkitgtk-debuginfo-0:1.2.6-2.el6_0.ppc
Vendor Fix fix
Unresolved product id: 6Server:webkitgtk-debuginfo-0:1.2.6-2.el6_0.ppc64
Vendor Fix fix
Unresolved product id: 6Server:webkitgtk-debuginfo-0:1.2.6-2.el6_0.s390
Vendor Fix fix
Unresolved product id: 6Server:webkitgtk-debuginfo-0:1.2.6-2.el6_0.s390x
Vendor Fix fix
Unresolved product id: 6Server:webkitgtk-debuginfo-0:1.2.6-2.el6_0.x86_64
Vendor Fix fix
Unresolved product id: 6Server:webkitgtk-devel-0:1.2.6-2.el6_0.i686
Vendor Fix fix
Unresolved product id: 6Server:webkitgtk-devel-0:1.2.6-2.el6_0.ppc
Vendor Fix fix
Unresolved product id: 6Server:webkitgtk-devel-0:1.2.6-2.el6_0.ppc64
Vendor Fix fix
Unresolved product id: 6Server:webkitgtk-devel-0:1.2.6-2.el6_0.s390
Vendor Fix fix
Unresolved product id: 6Server:webkitgtk-devel-0:1.2.6-2.el6_0.s390x
Vendor Fix fix
Unresolved product id: 6Server:webkitgtk-devel-0:1.2.6-2.el6_0.x86_64
Vendor Fix fix
Unresolved product id: 6Server:webkitgtk-doc-0:1.2.6-2.el6_0.i686
Vendor Fix fix
Unresolved product id: 6Server:webkitgtk-doc-0:1.2.6-2.el6_0.ppc64
Vendor Fix fix
Unresolved product id: 6Server:webkitgtk-doc-0:1.2.6-2.el6_0.s390x
Vendor Fix fix
Unresolved product id: 6Server:webkitgtk-doc-0:1.2.6-2.el6_0.x86_64
Vendor Fix fix
Unresolved product id: 6Workstation-optional:webkitgtk-0:1.2.6-2.el6_0.i686
Vendor Fix fix
Unresolved product id: 6Workstation-optional:webkitgtk-0:1.2.6-2.el6_0.ppc
Vendor Fix fix
Unresolved product id: 6Workstation-optional:webkitgtk-0:1.2.6-2.el6_0.ppc64
Vendor Fix fix
Unresolved product id: 6Workstation-optional:webkitgtk-0:1.2.6-2.el6_0.s390
Vendor Fix fix
Unresolved product id: 6Workstation-optional:webkitgtk-0:1.2.6-2.el6_0.s390x
Vendor Fix fix
Unresolved product id: 6Workstation-optional:webkitgtk-0:1.2.6-2.el6_0.src
Vendor Fix fix
Unresolved product id: 6Workstation-optional:webkitgtk-0:1.2.6-2.el6_0.x86_64
Vendor Fix fix
Unresolved product id: 6Workstation-optional:webkitgtk-debuginfo-0:1.2.6-2.el6_0.i686
Vendor Fix fix
Unresolved product id: 6Workstation-optional:webkitgtk-debuginfo-0:1.2.6-2.el6_0.ppc
Vendor Fix fix
Unresolved product id: 6Workstation-optional:webkitgtk-debuginfo-0:1.2.6-2.el6_0.ppc64
Vendor Fix fix
Unresolved product id: 6Workstation-optional:webkitgtk-debuginfo-0:1.2.6-2.el6_0.s390
Vendor Fix fix
Unresolved product id: 6Workstation-optional:webkitgtk-debuginfo-0:1.2.6-2.el6_0.s390x
Vendor Fix fix
Unresolved product id: 6Workstation-optional:webkitgtk-debuginfo-0:1.2.6-2.el6_0.x86_64
Vendor Fix fix
Unresolved product id: 6Workstation-optional:webkitgtk-devel-0:1.2.6-2.el6_0.i686
Vendor Fix fix
Unresolved product id: 6Workstation-optional:webkitgtk-devel-0:1.2.6-2.el6_0.ppc
Vendor Fix fix
Unresolved product id: 6Workstation-optional:webkitgtk-devel-0:1.2.6-2.el6_0.ppc64
Vendor Fix fix
Unresolved product id: 6Workstation-optional:webkitgtk-devel-0:1.2.6-2.el6_0.s390
Vendor Fix fix
Unresolved product id: 6Workstation-optional:webkitgtk-devel-0:1.2.6-2.el6_0.s390x
Vendor Fix fix
Unresolved product id: 6Workstation-optional:webkitgtk-devel-0:1.2.6-2.el6_0.x86_64
Vendor Fix fix
Unresolved product id: 6Workstation-optional:webkitgtk-doc-0:1.2.6-2.el6_0.i686
Vendor Fix fix
Unresolved product id: 6Workstation-optional:webkitgtk-doc-0:1.2.6-2.el6_0.ppc64
Vendor Fix fix
Unresolved product id: 6Workstation-optional:webkitgtk-doc-0:1.2.6-2.el6_0.s390x
Vendor Fix fix
Unresolved product id: 6Workstation-optional:webkitgtk-doc-0:1.2.6-2.el6_0.x86_64
Vendor Fix fix
Unresolved product id: 6Workstation:webkitgtk-0:1.2.6-2.el6_0.i686
Vendor Fix fix
Unresolved product id: 6Workstation:webkitgtk-0:1.2.6-2.el6_0.ppc
Vendor Fix fix
Unresolved product id: 6Workstation:webkitgtk-0:1.2.6-2.el6_0.ppc64
Vendor Fix fix
Unresolved product id: 6Workstation:webkitgtk-0:1.2.6-2.el6_0.s390
Vendor Fix fix
Unresolved product id: 6Workstation:webkitgtk-0:1.2.6-2.el6_0.s390x
Vendor Fix fix
Unresolved product id: 6Workstation:webkitgtk-0:1.2.6-2.el6_0.src
Vendor Fix fix
Unresolved product id: 6Workstation:webkitgtk-0:1.2.6-2.el6_0.x86_64
Vendor Fix fix
Unresolved product id: 6Workstation:webkitgtk-debuginfo-0:1.2.6-2.el6_0.i686
Vendor Fix fix
Unresolved product id: 6Workstation:webkitgtk-debuginfo-0:1.2.6-2.el6_0.ppc
Vendor Fix fix
Unresolved product id: 6Workstation:webkitgtk-debuginfo-0:1.2.6-2.el6_0.ppc64
Vendor Fix fix
Unresolved product id: 6Workstation:webkitgtk-debuginfo-0:1.2.6-2.el6_0.s390
Vendor Fix fix
Unresolved product id: 6Workstation:webkitgtk-debuginfo-0:1.2.6-2.el6_0.s390x
Vendor Fix fix
Unresolved product id: 6Workstation:webkitgtk-debuginfo-0:1.2.6-2.el6_0.x86_64
Vendor Fix fix
Unresolved product id: 6Workstation:webkitgtk-devel-0:1.2.6-2.el6_0.i686
Vendor Fix fix
Unresolved product id: 6Workstation:webkitgtk-devel-0:1.2.6-2.el6_0.ppc
Vendor Fix fix
Unresolved product id: 6Workstation:webkitgtk-devel-0:1.2.6-2.el6_0.ppc64
Vendor Fix fix
Unresolved product id: 6Workstation:webkitgtk-devel-0:1.2.6-2.el6_0.s390
Vendor Fix fix
Unresolved product id: 6Workstation:webkitgtk-devel-0:1.2.6-2.el6_0.s390x
Vendor Fix fix
Unresolved product id: 6Workstation:webkitgtk-devel-0:1.2.6-2.el6_0.x86_64
Vendor Fix fix
Unresolved product id: 6Workstation:webkitgtk-doc-0:1.2.6-2.el6_0.i686
Vendor Fix fix
Unresolved product id: 6Workstation:webkitgtk-doc-0:1.2.6-2.el6_0.ppc64
Vendor Fix fix
Unresolved product id: 6Workstation:webkitgtk-doc-0:1.2.6-2.el6_0.s390x
Vendor Fix fix
Unresolved product id: 6Workstation:webkitgtk-doc-0:1.2.6-2.el6_0.x86_64
Vendor Fix fix
Threats
Impact Moderate

WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to the rendering of an inline element.

Affected products
Fixed 161 products, the same list as for CVE-2010-1780
Threats
Impact Moderate

WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; does not properly handle dynamic modification of a text node, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document.

Affected products
Fixed 161 products, the same list as for CVE-2010-1780
Threats
Impact Moderate

The counters functionality in the Cascading Style Sheets (CSS) implementation in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document.

Affected products
Fixed 161 products, the same list as for CVE-2010-1780
Threats
Impact Moderate

WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; accesses uninitialized memory during processing of the (1) :first-letter and (2) :first-line pseudo-elements in an SVG text element, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted document.

Affected products
Fixed 161 products, the same list as for CVE-2010-1780
Threats
Impact Moderate

Use-after-free vulnerability in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a foreignObject element in an SVG document.

Affected products
Fixed 161 products, the same list as for CVE-2010-1780
Threats
Impact Moderate

WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a floating element in an SVG document.

Affected products
Fixed 161 products, the same list as for CVE-2010-1780
Threats
Impact Moderate

WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a use element in an SVG document.

Affected products
Fixed 161 products, the same list as for CVE-2010-1780
Threats
Impact Moderate

WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; does not properly handle just-in-time (JIT) compiled JavaScript stubs, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted HTML document, related to a "reentrancy issue."

Affected products
Fixed 161 products, the same list as for CVE-2010-1780
Threats
Impact Moderate

WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted regular expression.

Affected products
Fixed 161 products, the same list as for CVE-2010-1780
Threats
Impact Moderate

Multiple use-after-free vulnerabilities in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a (1) font-face or (2) use element in an SVG document.

Affected products
Fixed 161 products, the same list as for CVE-2010-1780
Threats
Impact Moderate

WebKit in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2; Android before 2.2; and webkitgtk before 1.2.6; does not properly validate floating-point data, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted HTML document, related to non-standard NaN representation.

CWE-20 - Improper Input Validation
Affected products
Fixed 161 products, the same list as for CVE-2010-1780
Threats
Impact Moderate

Use-after-free vulnerability in WebKit in Apple iOS before 4.1 on the iPhone and iPod touch, and webkitgtk before 1.2.6, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving selections.

CWE-416 - Use After Free
Affected products
Fixed 161 products, the same list as for CVE-2010-1780
Threats
Impact Moderate

WebKit in Apple iOS before 4.1 on the iPhone and iPod touch, and webkitgtk before 1.2.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors involving form menus.

Affected products
Fixed 161 products, the same list as for CVE-2010-1780
Threats
Impact Moderate

Use-after-free vulnerability in WebKit in Apple iOS before 4.1 on the iPhone and iPod touch, and webkitgtk before 1.2.6, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving scrollbars.

CWE-416 - Use After Free
Affected products
Fixed 161 products, the same list as for CVE-2010-1780
Threats
Impact Moderate

Google Chrome before 5.0.375.127, and webkitgtk before 1.2.5, does not properly handle SVG documents, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors related to state changes when using DeleteButtonController.

Affected products
Fixed 161 products, the same list as for CVE-2010-1780
Threats
Impact Moderate

The text-editing implementation in Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6, does not check a node type before performing a cast, which has unspecified impact and attack vectors related to (1) DeleteSelectionCommand.cpp, (2) InsertLineBreakCommand.cpp, or (3) InsertParagraphSeparatorCommand.cpp in WebCore/editing/.

Affected products
Fixed 161 products, the same list as for CVE-2010-1780
Threats
Impact Moderate

Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6, does not properly implement the history feature, which might allow remote attackers to spoof the address bar via unspecified vectors.

Affected products
Fixed 161 products, the same list as for CVE-2010-1780
Threats
Impact Moderate

Multiple use-after-free vulnerabilities in WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6, allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to improper handling of MIME types by plug-ins.

Affected products
Fixed 161 products, the same list as for CVE-2010-1780
Threats
Impact Moderate

Google Chrome before 5.0.375.127 and webkitgtk before 1.2.6 do not properly support the Ruby language, which allows attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.

Affected products
Fixed 161 products, the same list as for CVE-2010-1780
Threats
Impact Moderate

Google Chrome before 6.0.472.53 and webkitgtk before 1.2.6 do not properly handle counter nodes, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.

Affected products
Fixed 161 products, the same list as for CVE-2010-1780
Threats
Impact Moderate

Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 6.0.472.53, and webkitgtk before 1.2.6, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving element focus.

Affected products
Fixed 161 products, the same list as for CVE-2010-1780
Threats
Impact Moderate

WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 6.0.472.53, and webkitgtk before 1.2.6, does not properly restrict read access to images derived from CANVAS elements, which allows remote attackers to bypass the Same Origin Policy and obtain potentially sensitive image data via a crafted web site.

Affected products
Fixed 161 products, the same list as for CVE-2010-1780
Threats
Impact Moderate

Integer overflow in the Text::wholeText method in dom/Text.cpp in WebKit, as used in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4; webkitgtk before 1.2.6; and possibly other products allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving Text objects.

CWE-190 - Integer Overflow or Wraparound
Affected products
Fixed 161 products, the same list as for CVE-2010-1780
Threats
Impact Moderate

The WebCore::HTMLLinkElement::process function in WebCore/html/HTMLLinkElement.cpp in WebKit, as used in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4; webkitgtk before 1.2.6; and possibly other products does not verify whether DNS prefetching is enabled when processing an HTML LINK element, which allows remote attackers to bypass intended access restrictions, as demonstrated by an HTML e-mail message that uses a LINK element for X-Confirm-Reading-To functionality.

Affected products
Fixed 161 products, the same list as for CVE-2010-1780
Threats
Impact Moderate

Use-after-free vulnerability in WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving text editing.

CWE-416 - Use After Free
Affected products
Fixed 161 products, the same list as for CVE-2010-1780
Threats
Impact Moderate

WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, does not properly handle large text areas, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted HTML document.

Affected products
Fixed 161 products, the same list as for CVE-2010-1780
Threats
Impact Moderate

WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, accesses a frame object after this object has been destroyed, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

CWE-416 - Use After Free
Affected products
Fixed 161 products, the same list as for CVE-2010-1780
Threats
Impact Moderate

Array index error in the FEBlend::apply function in WebCore/platform/graphics/filters/FEBlend.cpp in WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted SVG document, related to effects in the application of filters.

Affected products
Fixed 161 products, the same list as for CVE-2010-1780
Threats
Impact Moderate

The CSSParser::parseFontFaceSrc function in WebCore/css/CSSParser.cpp in WebKit, as used in Google Chrome before 8.0.552.224, Chrome OS before 8.0.552.343, webkitgtk before 1.2.6, and other products does not properly parse Cascading Style Sheets (CSS) token sequences, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted local font, related to "Type Confusion."

Affected products
Fixed 161 products, the same list as for CVE-2010-1780
Threats
Impact Moderate
References
URL Category
https://access.redhat.com/errata/RHSA-2011:0177 self
https://access.redhat.com/security/updates/classi… external
https://bugzilla.redhat.com/show_bug.cgi?id=627366 external
https://bugzilla.redhat.com/show_bug.cgi?id=627703 external
https://bugzilla.redhat.com/show_bug.cgi?id=628032 external
https://bugzilla.redhat.com/show_bug.cgi?id=628035 external
https://bugzilla.redhat.com/show_bug.cgi?id=628071 external
https://bugzilla.redhat.com/show_bug.cgi?id=628076 external
https://bugzilla.redhat.com/show_bug.cgi?id=631939 external
https://bugzilla.redhat.com/show_bug.cgi?id=631946 external
https://bugzilla.redhat.com/show_bug.cgi?id=631948 external
https://bugzilla.redhat.com/show_bug.cgi?id=640353 external
https://bugzilla.redhat.com/show_bug.cgi?id=640357 external
https://bugzilla.redhat.com/show_bug.cgi?id=640360 external
https://bugzilla.redhat.com/show_bug.cgi?id=645914 external
https://bugzilla.redhat.com/show_bug.cgi?id=656115 external
https://bugzilla.redhat.com/show_bug.cgi?id=656118 external
https://bugzilla.redhat.com/show_bug.cgi?id=656126 external
https://bugzilla.redhat.com/show_bug.cgi?id=656129 external
https://bugzilla.redhat.com/show_bug.cgi?id=667022 external
https://bugzilla.redhat.com/show_bug.cgi?id=667024 external
https://bugzilla.redhat.com/show_bug.cgi?id=667025 external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2010-1780 self
https://bugzilla.redhat.com/show_bug.cgi?id=627366 external
https://www.cve.org/CVERecord?id=CVE-2010-1780 external
https://nvd.nist.gov/vuln/detail/CVE-2010-1780 external
https://access.redhat.com/security/cve/CVE-2010-1782 self
https://www.cve.org/CVERecord?id=CVE-2010-1782 external
https://nvd.nist.gov/vuln/detail/CVE-2010-1782 external
https://access.redhat.com/security/cve/CVE-2010-1783 self
https://www.cve.org/CVERecord?id=CVE-2010-1783 external
https://nvd.nist.gov/vuln/detail/CVE-2010-1783 external
https://access.redhat.com/security/cve/CVE-2010-1784 self
https://www.cve.org/CVERecord?id=CVE-2010-1784 external
https://nvd.nist.gov/vuln/detail/CVE-2010-1784 external
https://access.redhat.com/security/cve/CVE-2010-1785 self
https://www.cve.org/CVERecord?id=CVE-2010-1785 external
https://nvd.nist.gov/vuln/detail/CVE-2010-1785 external
https://access.redhat.com/security/cve/CVE-2010-1786 self
https://www.cve.org/CVERecord?id=CVE-2010-1786 external
https://nvd.nist.gov/vuln/detail/CVE-2010-1786 external
https://access.redhat.com/security/cve/CVE-2010-1787 self
https://www.cve.org/CVERecord?id=CVE-2010-1787 external
https://nvd.nist.gov/vuln/detail/CVE-2010-1787 external
https://access.redhat.com/security/cve/CVE-2010-1788 self
https://www.cve.org/CVERecord?id=CVE-2010-1788 external
https://nvd.nist.gov/vuln/detail/CVE-2010-1788 external
https://access.redhat.com/security/cve/CVE-2010-1790 self
https://www.cve.org/CVERecord?id=CVE-2010-1790 external
https://nvd.nist.gov/vuln/detail/CVE-2010-1790 external
https://access.redhat.com/security/cve/CVE-2010-1792 self
https://www.cve.org/CVERecord?id=CVE-2010-1792 external
https://nvd.nist.gov/vuln/detail/CVE-2010-1792 external
https://access.redhat.com/security/cve/CVE-2010-1793 self
https://www.cve.org/CVERecord?id=CVE-2010-1793 external
https://nvd.nist.gov/vuln/detail/CVE-2010-1793 external
https://access.redhat.com/security/cve/CVE-2010-1807 self
https://bugzilla.redhat.com/show_bug.cgi?id=627703 external
https://www.cve.org/CVERecord?id=CVE-2010-1807 external
https://nvd.nist.gov/vuln/detail/CVE-2010-1807 external
https://access.redhat.com/security/cve/CVE-2010-1812 self
https://bugzilla.redhat.com/show_bug.cgi?id=631939 external
https://www.cve.org/CVERecord?id=CVE-2010-1812 external
https://nvd.nist.gov/vuln/detail/CVE-2010-1812 external
https://access.redhat.com/security/cve/CVE-2010-1814 self
https://bugzilla.redhat.com/show_bug.cgi?id=631946 external
https://www.cve.org/CVERecord?id=CVE-2010-1814 external
https://nvd.nist.gov/vuln/detail/CVE-2010-1814 external
https://access.redhat.com/security/cve/CVE-2010-1815 self
https://bugzilla.redhat.com/show_bug.cgi?id=631948 external
https://www.cve.org/CVERecord?id=CVE-2010-1815 external
https://nvd.nist.gov/vuln/detail/CVE-2010-1815 external
https://access.redhat.com/security/cve/CVE-2010-3113 self
https://bugzilla.redhat.com/show_bug.cgi?id=628032 external
https://www.cve.org/CVERecord?id=CVE-2010-3113 external
https://nvd.nist.gov/vuln/detail/CVE-2010-3113 external
https://access.redhat.com/security/cve/CVE-2010-3114 self
https://bugzilla.redhat.com/show_bug.cgi?id=628035 external
https://www.cve.org/CVERecord?id=CVE-2010-3114 external
https://nvd.nist.gov/vuln/detail/CVE-2010-3114 external
https://access.redhat.com/security/cve/CVE-2010-3115 self
https://bugzilla.redhat.com/show_bug.cgi?id=628071 external
https://www.cve.org/CVERecord?id=CVE-2010-3115 external
https://nvd.nist.gov/vuln/detail/CVE-2010-3115 external
https://access.redhat.com/security/cve/CVE-2010-3116 self
https://bugzilla.redhat.com/show_bug.cgi?id=640353 external
https://www.cve.org/CVERecord?id=CVE-2010-3116 external
https://nvd.nist.gov/vuln/detail/CVE-2010-3116 external
https://access.redhat.com/security/cve/CVE-2010-3119 self
https://bugzilla.redhat.com/show_bug.cgi?id=628076 external
https://www.cve.org/CVERecord?id=CVE-2010-3119 external
https://nvd.nist.gov/vuln/detail/CVE-2010-3119 external
https://access.redhat.com/security/cve/CVE-2010-3255 self
https://bugzilla.redhat.com/show_bug.cgi?id=645914 external
https://www.cve.org/CVERecord?id=CVE-2010-3255 external
https://nvd.nist.gov/vuln/detail/CVE-2010-3255 external
https://access.redhat.com/security/cve/CVE-2010-3257 self
https://bugzilla.redhat.com/show_bug.cgi?id=640357 external
https://www.cve.org/CVERecord?id=CVE-2010-3257 external
https://nvd.nist.gov/vuln/detail/CVE-2010-3257 external
https://access.redhat.com/security/cve/CVE-2010-3259 self
https://bugzilla.redhat.com/show_bug.cgi?id=640360 external
https://www.cve.org/CVERecord?id=CVE-2010-3259 external
https://nvd.nist.gov/vuln/detail/CVE-2010-3259 external
https://access.redhat.com/security/cve/CVE-2010-3812 self
https://bugzilla.redhat.com/show_bug.cgi?id=667022 external
https://www.cve.org/CVERecord?id=CVE-2010-3812 external
https://nvd.nist.gov/vuln/detail/CVE-2010-3812 external
https://access.redhat.com/security/cve/CVE-2010-3813 self
https://bugzilla.redhat.com/show_bug.cgi?id=667024 external
https://www.cve.org/CVERecord?id=CVE-2010-3813 external
https://nvd.nist.gov/vuln/detail/CVE-2010-3813 external
https://access.redhat.com/security/cve/CVE-2010-4197 self
https://bugzilla.redhat.com/show_bug.cgi?id=656115 external
https://www.cve.org/CVERecord?id=CVE-2010-4197 external
https://nvd.nist.gov/vuln/detail/CVE-2010-4197 external
https://access.redhat.com/security/cve/CVE-2010-4198 self
https://bugzilla.redhat.com/show_bug.cgi?id=656118 external
https://www.cve.org/CVERecord?id=CVE-2010-4198 external
https://nvd.nist.gov/vuln/detail/CVE-2010-4198 external
https://access.redhat.com/security/cve/CVE-2010-4204 self
https://bugzilla.redhat.com/show_bug.cgi?id=656126 external
https://www.cve.org/CVERecord?id=CVE-2010-4204 external
https://nvd.nist.gov/vuln/detail/CVE-2010-4204 external
https://access.redhat.com/security/cve/CVE-2010-4206 self
https://bugzilla.redhat.com/show_bug.cgi?id=656129 external
https://www.cve.org/CVERecord?id=CVE-2010-4206 external
https://nvd.nist.gov/vuln/detail/CVE-2010-4206 external
https://access.redhat.com/security/cve/CVE-2010-4577 self
https://bugzilla.redhat.com/show_bug.cgi?id=667025 external
https://www.cve.org/CVERecord?id=CVE-2010-4577 external
https://nvd.nist.gov/vuln/detail/CVE-2010-4577 external

Loading 1.1 MB of JSON…



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.


Loading…