Gustavo Noronha Silva reports :

This release has essentially security fixes. Refer to the WebKit/gtk/NEWS file inside the tarball for details. We would like to thank the Red Hat security team (Huzaifa Sidhpurwala in particular) and Michael Gilbert from Debian for their help in checking (and pushing!) security issues affecting the WebKitGTK+ stable branch for this release.

- Fixes the following CVEs: CVE-2010-4492 CVE-2010-4493     CVE-2011-0482 CVE-2010-4199 CVE-2010-4578 CVE-2010-4040     CVE-2011-0778 CVE-2010-2901 CVE-2010-4042

  - Fixes a regression caused by earlier fix for     CVE-2010-1791. This caused webkitgtk to crash on certain     sites with JavaScript.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A large number of security issues were discovered in the WebKit browser and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service attacks, and arbitrary code execution.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201412-09 (Multiple packages, Multiple vulnerabilities fixed in 2011)

    Vulnerabilities have been discovered in the packages listed below.
      Please review the CVE identifiers in the Reference section for details.
      FMOD Studio       PEAR Mail       LVM2       GnuCash       xine-lib       Last.fm Scrobbler       WebKitGTK+       shadow tool suite       PEAR       unixODBC       Resource Agents       mrouted       rsync       XML Security Library       xrdb       Vino       OProfile       syslog-ng       sFlow Toolkit       GNOME Display Manager       libsoup       CA Certificates       Gitolite       QtCreator       Racer   Impact :

    A context-dependent attacker may be able to gain escalated privileges,       execute arbitrary code, cause Denial of Service, obtain sensitive       information, or otherwise bypass security restrictions.
  Workaround :

    There are no known workarounds at this time.

The version of Google Chrome installed on the remote host is earlier than 7.0.517.41.  Such versions are reportedly affected by multiple vulnerabilities :

  - It is possible to spam profiles via autofill /     autocomplete.  (Issue #48225, #51727)

  - An unspecified crash exists relating to forms.
    (Issue #48857)

  - A browser crash exists relating to form autofill.
    (Issue #50428)

  - It is possible to spoof the URL on page unload.
    (Issue #51680)

  - It is possible to bypass the pop-up blocker.
    (Issue #53002)

  - A crash on shutdown exists relating to Web Sockets.
    (Issue #53985)

  - A possible memory corruption exists with animated GIF     files. (Issue #54500)

  - Stale elements exists in the element map.
    (Issue #56451)

This version upgrade of webkit to 1.2.7 fixes the following bugs :

  - CVE-2010-2441: CVSS v2 Base Score: 4.3     (AV:N/AC:M/Au:N/C:P/I:N/A:N): Permissions, Privileges,     and Access Control (CWE-264)

  - CVE-2010-2901: CVSS v2 Base Score: 3.7     (AV:L/AC:H/Au:N/C:P/I:P/A:P): Buffer Errors (CWE-119)

  - CVE-2010-4042: CVSS v2 Base Score: 3.7     (AV:L/AC:H/Au:N/C:P/I:P/A:P): Input Validation (CWE-20)

  - CVE-2010-4492: CVSS v2 Base Score: 7.5     (AV:N/AC:L/Au:N/C:P/I:P/A:P): Resource Management Errors     (CWE-399)

  - CVE-2010-4493: CVSS v2 Base Score: 3.7     (AV:L/AC:H/Au:N/C:P/I:P/A:P): Resource Management Errors     (CWE-399)

  - CVE-2010-4578: CVSS v2 Base Score: 3.7     (AV:L/AC:H/Au:N/C:P/I:P/A:P): Input Validation (CWE-20)

  - CVE-2011-0482: CVSS v2 Base Score: 3.7     (AV:L/AC:H/Au:N/C:P/I:P/A:P): Numeric Errors (CWE-189)

  - CVE-2011-0778: CVSS v2 Base Score: 3.7     (AV:L/AC:H/Au:N/C:P/I:P/A:P): Permissions, Privileges,     and Access Control (CWE-264)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - WebKit: Improper handling of data types from event objects (CVE-2010-4205)

  - webkitgtk: heap-based buffer overflow (WSA-2015-0001) (CVE-2014-1303)

  - Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and     Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a     denial of service (application crash) via vectors involving HTML document subtrees. (CVE-2010-1761)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

Webkit version 1.2.7 fixes several security issues. (CVE-2010-2441 / CVE-2010-2901 / CVE-2010-4042 / CVE-2010-4492 / CVE-2010-4493 / CVE-2010-4578 / CVE-2011-0482 / CVE-2011-0778)

Versions of Google chrome earlier than 7.0.517.41 are potentially affected by multiple vulnerabilities :

  - It is possible to spam profiles via autofill / autocomplete. (48225, 51727)

  - An unspecified crash exists relating to forms. (48857)

  - A browser crash exists relating to form autofill. (50428)

  - It is possible to spoof the URl on page unload. (51680)

  - It is possible to bypass the pop-up blocker. (53002)

  - A crash on shutdown exists relating got Web Sockets. (53985)

  - A possible memory corruption exists with animated GIF files. (54500)

  - Stale elements exist in the element map. (56451)

ID	Name	Product	Family	Published	Updated	Severity
51950	FreeBSD : webkit-gtk2 -- Multiple vurnabilities. (35ecdcbe-3501-11e0-afcd-0015f2db7bde)	Nessus	FreeBSD Local Security Checks	2/11/2011	1/6/2021	critical
52018	Fedora 13 : webkitgtk-1.2.7-1.fc13 (2011-1224)	Nessus	Fedora Local Security Checks	2/18/2011	1/11/2021	critical
55967	Ubuntu 10.04 LTS / 10.10 : webkit vulnerabilities (USN-1195-1)	Nessus	Ubuntu Local Security Checks	8/24/2011	9/19/2019	critical
79962	GLSA-201412-09 : Multiple packages, Multiple vulnerabilities fixed in 2011	Nessus	Gentoo Local Security Checks	12/15/2014	1/6/2021	critical
50049	Google Chrome < 7.0.517.41 Multiple Vulnerabilities	Nessus	Windows	10/20/2010	4/11/2022	high
53886	openSUSE Security Update : libwebkit (openSUSE-SU-2011:0482-1)	Nessus	SuSE Local Security Checks	5/13/2011	1/14/2021	critical
199473	RHEL 6 : webkitgtk (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	6/3/2024	10/8/2024	critical
75630	openSUSE Security Update : libwebkit (openSUSE-SU-2011:0482-1)	Nessus	SuSE Local Security Checks	6/13/2014	1/14/2021	critical
55453	SuSE 11.1 Security Update : webkit (SAT Patch Number 4765)	Nessus	SuSE Local Security Checks	6/29/2011	1/19/2021	critical
800924	Google Chrome < 7.0.517.41 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	10/20/2010		high

Detections

Analytics

Plugins Search

critical

critical

critical

critical

high

critical

critical

critical

critical

high