Vulnerability   
Search   
    Search 219043 CVE descriptions
and 99761 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.68447
Category:Fedora Local Security Checks
Title:Fedora Core 13 FEDORA-2010-15957 (webkitgtk)
Summary:NOSUMMARY
Description:Description:
The remote host is missing an update to webkitgtk
announced via advisory FEDORA-2010-15957.

Update Information:

- New stable release, API and ABI compatible with previous 1.2.x versions.

- The patches to fix the following CVEs are included with help from Vincent Danen and other members of the Red Hat security team:

CVE-2010-3113 CVE-2010-1814 CVE-2010-1812
CVE-2010-1815 CVE-2010-3115 CVE-2010-1807 CVE-2010-3114
CVE-2010-3116 CVE-2010-3257 CVE-2010-3259

References:

[ 1 ] Bug #628032 - CVE-2010-3113 webkit: memory corruption when handling SVG documents
https://bugzilla.redhat.com/show_bug.cgi?id=628032
[ 2 ] Bug #631946 - CVE-2010-1814 webkit: memory corruption flaw when handling form menus
https://bugzilla.redhat.com/show_bug.cgi?id=631946
[ 3 ] Bug #631939 - CVE-2010-1812 webkit: use-after-free flaw in handling of selections
https://bugzilla.redhat.com/show_bug.cgi?id=631939
[ 4 ] Bug #631948 - CVE-2010-1815 webkit: use-after-free flaw when handling scrollbars
https://bugzilla.redhat.com/show_bug.cgi?id=631948
[ 5 ] Bug #628071 - CVE-2010-3115 webkit: address bar spoofing with history bug
https://bugzilla.redhat.com/show_bug.cgi?id=628071
[ 6 ] Bug #627703 - CVE-2010-1807 webkit: input validation error when parsing certain NaN values
https://bugzilla.redhat.com/show_bug.cgi?id=627703
[ 7 ] Bug #628035 - CVE-2010-3114 webkit: bad cast with text editing
https://bugzilla.redhat.com/show_bug.cgi?id=628035
[ 8 ] Bug #640353 - CVE-2010-3116 webkit: memory corruption with MIME types
https://bugzilla.redhat.com/show_bug.cgi?id=640353
[ 9 ] Bug #640357 - CVE-2010-3257 webkit: stale pointer issue with focusing
https://bugzilla.redhat.com/show_bug.cgi?id=640357
[ 10 ] Bug #640360 - CVE-2010-3259 webkit: cross-origin image theft
https://bugzilla.redhat.com/show_bug.cgi?id=640360

Solution: Apply the appropriate updates.

This update can be installed with the yum update program. Use
su -c 'yum update webkitgtk' at the command line.
For more information, refer to Managing Software with yum,
available at http://docs.fedoraproject.org/yum/.

http://www.securityspace.com/smysecure/catid.html?in=FEDORA-2010-15957

Risk factor : Critical

CVSS Score:
10.0

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2010-3113
BugTraq ID: 44199
http://www.securityfocus.com/bid/44199
http://www.mandriva.com/security/advisories?name=MDVSA-2011:039
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11901
http://www.redhat.com/support/errata/RHSA-2011-0177.html
http://secunia.com/advisories/41856
http://secunia.com/advisories/43086
http://www.ubuntu.com/usn/USN-1006-1
http://www.vupen.com/english/advisories/2010/2722
http://www.vupen.com/english/advisories/2011/0216
http://www.vupen.com/english/advisories/2011/0552
Common Vulnerability Exposure (CVE) ID: CVE-2010-1814
http://lists.apple.com/archives/security-announce/2010//Sep/msg00002.html
http://lists.apple.com/archives/security-announce/2010//Nov/msg00002.html
http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html
BugTraq ID: 43083
http://www.securityfocus.com/bid/43083
http://secunia.com/advisories/42314
http://secunia.com/advisories/43068
SuSE Security Announcement: SUSE-SR:2011:002 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
http://www.vupen.com/english/advisories/2011/0212
XForce ISS Database: appleios-formmenus-code-exec(61701)
https://exchange.xforce.ibmcloud.com/vulnerabilities/61701
Common Vulnerability Exposure (CVE) ID: CVE-2010-1812
BugTraq ID: 43079
http://www.securityfocus.com/bid/43079
XForce ISS Database: appleios-selections-code-exec(61699)
https://exchange.xforce.ibmcloud.com/vulnerabilities/61699
Common Vulnerability Exposure (CVE) ID: CVE-2010-1815
BugTraq ID: 43081
http://www.securityfocus.com/bid/43081
XForce ISS Database: appleios-scrollbars-code-exec(61702)
https://exchange.xforce.ibmcloud.com/vulnerabilities/61702
Common Vulnerability Exposure (CVE) ID: CVE-2010-3115
BugTraq ID: 44203
http://www.securityfocus.com/bid/44203
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11953
Common Vulnerability Exposure (CVE) ID: CVE-2010-1807
http://lists.apple.com/archives/security-announce/2010//Sep/msg00001.html
BugTraq ID: 43047
http://www.securityfocus.com/bid/43047
http://www.computerworld.com/s/article/9195058/Researcher_to_release_Web_based_Android_attack
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11964
http://www.vupen.com/english/advisories/2010/3046
Common Vulnerability Exposure (CVE) ID: CVE-2010-3114
BugTraq ID: 44201
http://www.securityfocus.com/bid/44201
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11577
Common Vulnerability Exposure (CVE) ID: CVE-2010-3116
BugTraq ID: 44200
http://www.securityfocus.com/bid/44200
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11909
Common Vulnerability Exposure (CVE) ID: CVE-2010-3257
BugTraq ID: 44204
http://www.securityfocus.com/bid/44204
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12138
Common Vulnerability Exposure (CVE) ID: CVE-2010-3259
BugTraq ID: 44206
http://www.securityfocus.com/bid/44206
https://technet.microsoft.com/library/security/msvr11-002
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11221
Common Vulnerability Exposure (CVE) ID: CVE-2010-1780
http://lists.apple.com/archives/security-announce/2010//Jul/msg00001.html
BugTraq ID: 42020
http://www.securityfocus.com/bid/42020
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10964
Common Vulnerability Exposure (CVE) ID: CVE-2010-1782
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11935
SuSE Security Announcement: SUSE-SR:2010:018 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html
Common Vulnerability Exposure (CVE) ID: CVE-2010-1784
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11766
Common Vulnerability Exposure (CVE) ID: CVE-2010-1785
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11941
Common Vulnerability Exposure (CVE) ID: CVE-2010-1786
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11837
Common Vulnerability Exposure (CVE) ID: CVE-2010-1787
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11877
Common Vulnerability Exposure (CVE) ID: CVE-2010-1788
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11962
Common Vulnerability Exposure (CVE) ID: CVE-2010-1790
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11777
Common Vulnerability Exposure (CVE) ID: CVE-2010-1792
http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11898
Common Vulnerability Exposure (CVE) ID: CVE-2010-1793
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11923
Common Vulnerability Exposure (CVE) ID: CVE-2010-2648
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11900
Common Vulnerability Exposure (CVE) ID: CVE-2010-1386
BugTraq ID: 42500
http://www.securityfocus.com/bid/42500
Common Vulnerability Exposure (CVE) ID: CVE-2010-1392
http://lists.apple.com/archives/security-announce/2010/Jun/msg00000.html
http://lists.apple.com/archives/security-announce/2010//Jun/msg00002.html
http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html
BugTraq ID: 40620
http://www.securityfocus.com/bid/40620
Bugtraq: 20100608 VUPEN Security Research - Apple Safari WebKit HTML Button Use-after-free Vulnerability (CVE-2010-1392) (Google Search)
http://www.securityfocus.com/archive/1/511700/100/0/threaded
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7024
http://securitytracker.com/id?1024067
http://secunia.com/advisories/40105
http://secunia.com/advisories/40196
http://www.vupen.com/english/advisories/2010/1373
http://www.vupen.com/english/advisories/2010/1512
Common Vulnerability Exposure (CVE) ID: CVE-2010-1405
BugTraq ID: 40659
http://www.securityfocus.com/bid/40659
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7252
Common Vulnerability Exposure (CVE) ID: CVE-2010-1407
BugTraq ID: 41016
http://www.securityfocus.com/bid/41016
XForce ISS Database: appleios-historyreplace-info-disclosure(59629)
https://exchange.xforce.ibmcloud.com/vulnerabilities/59629
Common Vulnerability Exposure (CVE) ID: CVE-2010-1416
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7401
Common Vulnerability Exposure (CVE) ID: CVE-2010-1417
BugTraq ID: 40672
http://www.securityfocus.com/bid/40672
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6876
Common Vulnerability Exposure (CVE) ID: CVE-2010-1665
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7034
http://secunia.com/advisories/39651
http://www.vupen.com/english/advisories/2010/1016
Common Vulnerability Exposure (CVE) ID: CVE-2010-1418
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6871
Common Vulnerability Exposure (CVE) ID: CVE-2010-1421
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6739
Common Vulnerability Exposure (CVE) ID: CVE-2010-1422
https://bugzilla.mozilla.org/show_bug.cgi?id=552255
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7591
Common Vulnerability Exposure (CVE) ID: CVE-2010-1501
Common Vulnerability Exposure (CVE) ID: CVE-2010-1767
BugTraq ID: 39603
http://www.securityfocus.com/bid/39603
http://osvdb.org/64002
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11140
http://secunia.com/advisories/39544
Common Vulnerability Exposure (CVE) ID: CVE-2010-1664
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6878
Common Vulnerability Exposure (CVE) ID: CVE-2010-1758
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7335
Common Vulnerability Exposure (CVE) ID: CVE-2010-1759
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7005
Common Vulnerability Exposure (CVE) ID: CVE-2010-1760
BugTraq ID: 42494
http://www.securityfocus.com/bid/42494
Common Vulnerability Exposure (CVE) ID: CVE-2010-1761
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7157
Common Vulnerability Exposure (CVE) ID: CVE-2010-1762
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7503
Common Vulnerability Exposure (CVE) ID: CVE-2010-1770
http://zerodayinitiative.com/advisories/ZDI-10-093/
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7099
http://secunia.com/advisories/40072
Common Vulnerability Exposure (CVE) ID: CVE-2010-1771
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6862
XForce ISS Database: safari-webkit-fonts-ce(59214)
https://exchange.xforce.ibmcloud.com/vulnerabilities/59214
Common Vulnerability Exposure (CVE) ID: CVE-2010-1772
http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044023.html
http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044031.html
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11661
http://secunia.com/advisories/40557
http://www.vupen.com/english/advisories/2010/1801
Common Vulnerability Exposure (CVE) ID: CVE-2010-1773
BugTraq ID: 41575
http://www.securityfocus.com/bid/41575
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11830
Common Vulnerability Exposure (CVE) ID: CVE-2010-1774
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7476
XForce ISS Database: safari-webkit-htmltables-ce(59218)
https://exchange.xforce.ibmcloud.com/vulnerabilities/59218
Common Vulnerability Exposure (CVE) ID: CVE-2010-2264
BugTraq ID: 40756
http://www.securityfocus.com/bid/40756
CopyrightCopyright (c) 2010 E-Soft Inc. http://www.securityspace.com

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2022 E-Soft Inc. All rights reserved.