Multiple cross-site scripting, denial of service and arbitrary code execution security flaws were discovered in webkit.

Please consult the CVE web links for further information.

The updated packages have been upgraded to the latest version (1.2.7) to correct these issues.

The version of Google Chrome installed on the remote host is earlier than 6.0.472.53.  It therefore is reportedly affected by multiple vulnerabilities :

  - It is possible to bypass the pop-up blocker with a blank     frame target . (Issue #34414)

  - It is possible to visually spoof the URL bar with     homographic sequences. (Issue #37201)

  - Restrictions on setting clipboard content are not strict     enough. (Issue #41654)

  - A stale pointer exists with SVG filters. (Issue #45659)

  - It may be possible to enumerate installed extensions.
    (Issue #45876)

  - An unspecified vulnerability in WebSockets could lead     to a browser NULL crash. (Issue #46750, #51846)

  - A use-after-free error exists in the Notifications     presenter. (Issue #50386)

  - An unspecified memory corruption issue exists in     Notification permissions. (Issue #50839)

  - Multiple unspecified integer errors exist in WebSockets.
    (Issue #51360, #51739)

  - A memory corruption issue exists with counter nodes.
    (Issue #51653)

  - Chrome may store an excessive amount of autocomplete     entries. (Issue #51727)

  - A stale pointer exists in focus handling. (Issue #52443)

  - A Sandbox parameter deserialization error exists.
    (Issue #52682)

  - An unspecified cross-origin image theft issue exists.
    (Issue #53001)

A large number of security issues were discovered in the WebKit browser and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service attacks, and arbitrary code execution.

Please consult the bug listed at the top of this advisory to get the exact list of CVE numbers fixed for each release.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Published	Updated	Severity
52523	Mandriva Linux Security Advisory : webkit (MDVSA-2011:039)	Nessus	Mandriva Local Security Checks	3/3/2011	1/6/2021	critical
49089	Google Chrome < 6.0.472.53 Multiple Vulnerabilities	Nessus	Windows	9/2/2010	4/11/2022	high
50046	Ubuntu 9.10 / 10.04 LTS / 10.10 : webkit vulnerabilities (USN-1006-1)	Nessus	Ubuntu Local Security Checks	10/20/2010	9/19/2019	critical

Detections

Analytics

Plugins Search

critical

high

critical