Vulnerability   
Search   
    Search 219043 CVE descriptions
and 99761 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.68773
Category:Fedora Local Security Checks
Title:Fedora Core 13 FEDORA-2011-0121 (webkitgtk)
Summary:NOSUMMARY
Description:Description:
The remote host is missing an update to webkitgtk
announced via advisory FEDORA-2011-0121.

Update Information:

- New stable release, API and ABI compatible with previous 1.2.x versions
- Fixes crashes with newer libpng (>= 1.4)
- The patches to fix the following CVEs are included with help from Huzaifa Sidhpurwala from the Red Hat security team

CVE-2010-4198 CVE-2010-4197 CVE-2010-4204 CVE-2010-4206
CVE-2010-1791 CVE-2010-3812 CVE-2010-3813 CVE-2010-4577

References:

[ 1 ] Bug #656118 - CVE-2010-4198 WebKit: Memory corruption due to improper handling of large text area
https://bugzilla.redhat.com/show_bug.cgi?id=656118
[ 2 ] Bug #656115 - CVE-2010-4197 WebKit: Use-after-free vulnerabiity related to text editing causes memory corruption
https://bugzilla.redhat.com/show_bug.cgi?id=656115
[ 3 ] Bug #656129 - CVE-2010-4206 WebKit: Array index error during processing of an SVG document
https://bugzilla.redhat.com/show_bug.cgi?id=656129
[ 4 ] Bug #667022 - CVE-2010-3812 webkit: Integer overflow in WebKit's handling of Text objects
https://bugzilla.redhat.com/show_bug.cgi?id=667022
[ 5 ] Bug #667024 - CVE-2010-3813 webkit: HTMLLinkElement ignores dnsPrefetchingEnabled setting
https://bugzilla.redhat.com/show_bug.cgi?id=667024
[ 6 ] Bug #667025 - CVE-2010-4577 webkit: CSS Font Face Parsing Type Confusion Vulnerability
https://bugzilla.redhat.com/show_bug.cgi?id=667025
[ 7 ] Bug #656126 - CVE-2010-4204 WebKit: Use-after-free vulnerability related frame object
https://bugzilla.redhat.com/show_bug.cgi?id=656126

Solution: Apply the appropriate updates.

This update can be installed with the yum update program. Use
su -c 'yum update webkitgtk' at the command line.
For more information, refer to Managing Software with yum,
available at http://docs.fedoraproject.org/yum/.

http://www.securityspace.com/smysecure/catid.html?in=FEDORA-2011-0121

Risk factor : Critical

CVSS Score:
10.0

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2010-4198
BugTraq ID: 45719
http://www.securityfocus.com/bid/45719
http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052906.html
http://www.mandriva.com/security/advisories?name=MDVSA-2011:039
https://bugs.webkit.org/show_bug.cgi?id=45611
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12157
http://www.redhat.com/support/errata/RHSA-2011-0177.html
http://secunia.com/advisories/42109
http://secunia.com/advisories/43086
http://www.vupen.com/english/advisories/2011/0216
http://www.vupen.com/english/advisories/2011/0552
Common Vulnerability Exposure (CVE) ID: CVE-2010-4197
BugTraq ID: 45720
http://www.securityfocus.com/bid/45720
http://trac.webkit.org/changeset/70594
https://bugs.webkit.org/show_bug.cgi?id=48349
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12266
Common Vulnerability Exposure (CVE) ID: CVE-2010-4204
BugTraq ID: 45718
http://www.securityfocus.com/bid/45718
http://trac.webkit.org/changeset/70517
https://bugs.webkit.org/show_bug.cgi?id=48281
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12174
Common Vulnerability Exposure (CVE) ID: CVE-2010-4206
BugTraq ID: 45721
http://www.securityfocus.com/bid/45721
http://trac.webkit.org/changeset/70652
https://bugs.webkit.org/show_bug.cgi?id=48371
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11949
Common Vulnerability Exposure (CVE) ID: CVE-2010-1791
http://lists.apple.com/archives/security-announce/2010//Jul/msg00001.html
http://lists.apple.com/archives/security-announce/2010//Sep/msg00002.html
http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html
BugTraq ID: 42020
http://www.securityfocus.com/bid/42020
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11802
http://secunia.com/advisories/42314
http://secunia.com/advisories/43068
SuSE Security Announcement: SUSE-SR:2011:002 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
http://www.vupen.com/english/advisories/2011/0212
Common Vulnerability Exposure (CVE) ID: CVE-2010-3812
http://lists.apple.com/archives/security-announce/2010//Nov/msg00002.html
BugTraq ID: 44960
http://www.securityfocus.com/bid/44960
http://trac.webkit.org/changeset/68705
http://www.zerodayinitiative.com/advisories/ZDI-10-257/
https://bugs.webkit.org/show_bug.cgi?id=46848
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11689
http://www.vupen.com/english/advisories/2010/3046
XForce ISS Database: safari-text-objects-code-execution(63350)
https://exchange.xforce.ibmcloud.com/vulnerabilities/63350
Common Vulnerability Exposure (CVE) ID: CVE-2010-3813
http://trac.webkit.org/changeset/63622
https://bugs.webkit.org/show_bug.cgi?id=42500
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12293
Common Vulnerability Exposure (CVE) ID: CVE-2010-4577
BugTraq ID: 45722
http://www.securityfocus.com/bid/45722
Debian Security Information: DSA-2188 (Google Search)
http://www.debian.org/security/2011/dsa-2188
http://www.gentoo.org/security/en/glsa/glsa-201012-01.xml
http://trac.webkit.org/changeset/72685
http://trac.webkit.org/changeset/72685/trunk/WebCore/css/CSSParser.cpp
https://bugs.webkit.org/show_bug.cgi?id=49883
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13953
http://secunia.com/advisories/42648
Common Vulnerability Exposure (CVE) ID: CVE-2010-3255
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11736
Common Vulnerability Exposure (CVE) ID: CVE-2010-3119
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12107
Common Vulnerability Exposure (CVE) ID: CVE-2010-3113
BugTraq ID: 44199
http://www.securityfocus.com/bid/44199
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11901
http://secunia.com/advisories/41856
http://www.ubuntu.com/usn/USN-1006-1
http://www.vupen.com/english/advisories/2010/2722
Common Vulnerability Exposure (CVE) ID: CVE-2010-1814
BugTraq ID: 43083
http://www.securityfocus.com/bid/43083
XForce ISS Database: appleios-formmenus-code-exec(61701)
https://exchange.xforce.ibmcloud.com/vulnerabilities/61701
Common Vulnerability Exposure (CVE) ID: CVE-2010-1812
BugTraq ID: 43079
http://www.securityfocus.com/bid/43079
XForce ISS Database: appleios-selections-code-exec(61699)
https://exchange.xforce.ibmcloud.com/vulnerabilities/61699
Common Vulnerability Exposure (CVE) ID: CVE-2010-1815
BugTraq ID: 43081
http://www.securityfocus.com/bid/43081
XForce ISS Database: appleios-scrollbars-code-exec(61702)
https://exchange.xforce.ibmcloud.com/vulnerabilities/61702
Common Vulnerability Exposure (CVE) ID: CVE-2010-3115
BugTraq ID: 44203
http://www.securityfocus.com/bid/44203
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11953
Common Vulnerability Exposure (CVE) ID: CVE-2010-1807
http://lists.apple.com/archives/security-announce/2010//Sep/msg00001.html
BugTraq ID: 43047
http://www.securityfocus.com/bid/43047
http://www.computerworld.com/s/article/9195058/Researcher_to_release_Web_based_Android_attack
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11964
Common Vulnerability Exposure (CVE) ID: CVE-2010-3114
BugTraq ID: 44201
http://www.securityfocus.com/bid/44201
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11577
Common Vulnerability Exposure (CVE) ID: CVE-2010-3116
BugTraq ID: 44200
http://www.securityfocus.com/bid/44200
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11909
Common Vulnerability Exposure (CVE) ID: CVE-2010-3257
BugTraq ID: 44204
http://www.securityfocus.com/bid/44204
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12138
Common Vulnerability Exposure (CVE) ID: CVE-2010-3259
BugTraq ID: 44206
http://www.securityfocus.com/bid/44206
https://technet.microsoft.com/library/security/msvr11-002
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11221
Common Vulnerability Exposure (CVE) ID: CVE-2010-1780
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10964
Common Vulnerability Exposure (CVE) ID: CVE-2010-1782
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11935
SuSE Security Announcement: SUSE-SR:2010:018 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html
Common Vulnerability Exposure (CVE) ID: CVE-2010-1784
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11766
Common Vulnerability Exposure (CVE) ID: CVE-2010-1785
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11941
Common Vulnerability Exposure (CVE) ID: CVE-2010-1786
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11837
Common Vulnerability Exposure (CVE) ID: CVE-2010-1787
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11877
Common Vulnerability Exposure (CVE) ID: CVE-2010-1788
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11962
Common Vulnerability Exposure (CVE) ID: CVE-2010-1790
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11777
Common Vulnerability Exposure (CVE) ID: CVE-2010-1792
http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11898
Common Vulnerability Exposure (CVE) ID: CVE-2010-1793
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11923
Common Vulnerability Exposure (CVE) ID: CVE-2010-2648
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11900
Common Vulnerability Exposure (CVE) ID: CVE-2010-1386
BugTraq ID: 42500
http://www.securityfocus.com/bid/42500
Common Vulnerability Exposure (CVE) ID: CVE-2010-1392
http://lists.apple.com/archives/security-announce/2010/Jun/msg00000.html
http://lists.apple.com/archives/security-announce/2010//Jun/msg00002.html
http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html
BugTraq ID: 40620
http://www.securityfocus.com/bid/40620
Bugtraq: 20100608 VUPEN Security Research - Apple Safari WebKit HTML Button Use-after-free Vulnerability (CVE-2010-1392) (Google Search)
http://www.securityfocus.com/archive/1/511700/100/0/threaded
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7024
http://securitytracker.com/id?1024067
http://secunia.com/advisories/40105
http://secunia.com/advisories/40196
http://www.vupen.com/english/advisories/2010/1373
http://www.vupen.com/english/advisories/2010/1512
Common Vulnerability Exposure (CVE) ID: CVE-2010-1405
BugTraq ID: 40659
http://www.securityfocus.com/bid/40659
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7252
Common Vulnerability Exposure (CVE) ID: CVE-2010-1407
BugTraq ID: 41016
http://www.securityfocus.com/bid/41016
XForce ISS Database: appleios-historyreplace-info-disclosure(59629)
https://exchange.xforce.ibmcloud.com/vulnerabilities/59629
Common Vulnerability Exposure (CVE) ID: CVE-2010-1416
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7401
Common Vulnerability Exposure (CVE) ID: CVE-2010-1417
BugTraq ID: 40672
http://www.securityfocus.com/bid/40672
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6876
Common Vulnerability Exposure (CVE) ID: CVE-2010-1665
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7034
http://secunia.com/advisories/39651
http://www.vupen.com/english/advisories/2010/1016
Common Vulnerability Exposure (CVE) ID: CVE-2010-1418
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6871
Common Vulnerability Exposure (CVE) ID: CVE-2010-1421
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6739
Common Vulnerability Exposure (CVE) ID: CVE-2010-1422
https://bugzilla.mozilla.org/show_bug.cgi?id=552255
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7591
Common Vulnerability Exposure (CVE) ID: CVE-2010-1501
Common Vulnerability Exposure (CVE) ID: CVE-2010-1767
BugTraq ID: 39603
http://www.securityfocus.com/bid/39603
http://osvdb.org/64002
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11140
http://secunia.com/advisories/39544
Common Vulnerability Exposure (CVE) ID: CVE-2010-1664
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6878
Common Vulnerability Exposure (CVE) ID: CVE-2010-1758
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7335
Common Vulnerability Exposure (CVE) ID: CVE-2010-1759
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7005
Common Vulnerability Exposure (CVE) ID: CVE-2010-1760
BugTraq ID: 42494
http://www.securityfocus.com/bid/42494
Common Vulnerability Exposure (CVE) ID: CVE-2010-1761
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7157
Common Vulnerability Exposure (CVE) ID: CVE-2010-1762
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7503
Common Vulnerability Exposure (CVE) ID: CVE-2010-1770
http://zerodayinitiative.com/advisories/ZDI-10-093/
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7099
http://secunia.com/advisories/40072
Common Vulnerability Exposure (CVE) ID: CVE-2010-1771
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6862
XForce ISS Database: safari-webkit-fonts-ce(59214)
https://exchange.xforce.ibmcloud.com/vulnerabilities/59214
Common Vulnerability Exposure (CVE) ID: CVE-2010-1772
http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044023.html
http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044031.html
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11661
http://secunia.com/advisories/40557
http://www.vupen.com/english/advisories/2010/1801
Common Vulnerability Exposure (CVE) ID: CVE-2010-1773
BugTraq ID: 41575
http://www.securityfocus.com/bid/41575
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11830
Common Vulnerability Exposure (CVE) ID: CVE-2010-1774
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7476
XForce ISS Database: safari-webkit-htmltables-ce(59218)
https://exchange.xforce.ibmcloud.com/vulnerabilities/59218
Common Vulnerability Exposure (CVE) ID: CVE-2010-2264
BugTraq ID: 40756
http://www.securityfocus.com/bid/40756
CopyrightCopyright (c) 2011 E-Soft Inc. http://www.securityspace.com

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2022 E-Soft Inc. All rights reserved.