Test ID:	1.3.6.1.4.1.25623.1.0.61271
Category:	Fedora Local Security Checks
Title:	Fedora Core 9 FEDORA-2008-6186 (WebKit)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to WebKit announced via advisory FEDORA-2008-6186. WebKit is an open source web browser engine. Update Information: This updated WebKit snapshot fixes CVE-2008-2307. (A memory corruption issue exists in WebKit's handling of JavaScript arrays. Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution.) ChangeLog: * Sat Jul 5 2008 Peter Gordon 1.0.0-0.11.svn34655 - Update to new upstream snapshot (SVN 34655) - Resolves: CVE-2008-2307 (bug #454092: memory corruption in handling of JavaScript arrays) - Add some build-time conditionals for non-default features: debug, html5video, pango, svg. References: [ 1 ] Bug #454092 - CVE-2008-2307 WebKit: memory corruption in handling of JavaScript arrays https://bugzilla.redhat.com/show_bug.cgi?id=454092 Solution: Apply the appropriate updates. This update can be installed with the yum update program. Use su -c 'yum update WebKit' at the command line. For more information, refer to Managing Software with yum, available at http://docs.fedoraproject.org/yum/. http://www.securityspace.com/smysecure/catid.html?in=FEDORA-2008-6186 Risk factor : Critical CVSS Score: 9.3
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2008-2307 http://lists.apple.com/archives/security-announce/2008//Jun/msg00001.html http://lists.apple.com/archives/security-announce/2008//Jun/msg00003.html http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html BugTraq ID: 29836 http://www.securityfocus.com/bid/29836 CERT/CC vulnerability note: VU#361043 http://www.kb.cert.org/vuls/id/361043 https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00279.html https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00319.html http://www.securitytracker.com/id?1020330 http://secunia.com/advisories/30775 http://secunia.com/advisories/30801 http://secunia.com/advisories/30992 http://secunia.com/advisories/31074 http://www.vupen.com/english/advisories/2008/1882/references http://www.vupen.com/english/advisories/2008/1980 http://www.vupen.com/english/advisories/2008/1981/references http://www.vupen.com/english/advisories/2008/2094/references
Copyright	Copyright (c) 2008 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.