Test ID:	1.3.6.1.4.1.25623.1.0.68883
Category:	Fedora Local Security Checks
Title:	Fedora Core 13 FEDORA-2011-1224 (webkitgtk)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to webkitgtk announced via advisory FEDORA-2011-1224. Update Information: * Fixes the following CVEs: CVE-2010-4492 CVE-2010-4493 CVE-2011-0482 CVE-2010-4199 CVE-2010-4578 CVE-2010-4040 CVE-2011-0778 CVE-2010-2901 CVE-2010-4042 * Fixes a regression caused by earlier fix for CVE-2010-1791. This caused webkitgtk to crash on certain sites with javascript. References: [ 1 ] Bug #676201 - CVE-2010-4492 WebKit: Use-after-free vulnerability in SVG animations https://bugzilla.redhat.com/show_bug.cgi?id=676201 [ 2 ] Bug #676202 - CVE-2010-4493 WebKit: Use-after-free vulnerability related to handling of mouse dragging events. https://bugzilla.redhat.com/show_bug.cgi?id=676202 [ 3 ] Bug #676203 - CVE-2011-0482 WebKit: Bad cast during handling of anchors causes crash via crafted HTML documents https://bugzilla.redhat.com/show_bug.cgi?id=676203 [ 4 ] Bug #656122 - CVE-2010-4199 WebKit: Improper cast of an unspecified variable during processing of an SVG use element https://bugzilla.redhat.com/show_bug.cgi?id=656122 [ 5 ] Bug #676207 - CVE-2010-4578 WebKit: Stale SVG pointer in Cursors DOM https://bugzilla.redhat.com/show_bug.cgi?id=676207 [ 6 ] Bug #657101 - CVE-2010-4040 WebKit: crafted animated GIF image could cause DoS (memory corruption) https://bugzilla.redhat.com/show_bug.cgi?id=657101 [ 7 ] Bug #676209 - CVE-2011-0778 WebKit: restrict cross-origin drag+drop in WebKit https://bugzilla.redhat.com/show_bug.cgi?id=676209 [ 8 ] Bug #676210 - CVE-2010-2901 WebKit: Memory corruption with crash in RenderObject::containingBlock() https://bugzilla.redhat.com/show_bug.cgi?id=676210 [ 9 ] Bug #676212 - CVE-2010-4042 WebKit: Stale elements in an element map causes webkit to crash https://bugzilla.redhat.com/show_bug.cgi?id=676212 Solution: Apply the appropriate updates. This update can be installed with the yum update program. Use su -c 'yum update webkitgtk' at the command line. For more information, refer to Managing Software with yum, available at http://docs.fedoraproject.org/yum/. http://www.securityspace.com/smysecure/catid.html?in=FEDORA-2011-1224 Risk factor : Critical CVSS Score: 10.0
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2010-4492 Debian Security Information: DSA-2188 (Google Search) http://www.debian.org/security/2011/dsa-2188 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11475 http://secunia.com/advisories/42472 SuSE Security Announcement: SUSE-SR:2011:009 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html Common Vulnerability Exposure (CVE) ID: CVE-2010-4493 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12129 Common Vulnerability Exposure (CVE) ID: CVE-2011-0482 BugTraq ID: 45788 http://www.securityfocus.com/bid/45788 http://osvdb.org/70465 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14662 http://secunia.com/advisories/42951 XForce ISS Database: chrome-anchors-dos(64673) https://exchange.xforce.ibmcloud.com/vulnerabilities/64673 Common Vulnerability Exposure (CVE) ID: CVE-2010-4199 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11429 http://secunia.com/advisories/42109 Common Vulnerability Exposure (CVE) ID: CVE-2010-4578 BugTraq ID: 45390 http://www.securityfocus.com/bid/45390 http://www.gentoo.org/security/en/glsa/glsa-201012-01.xml https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14323 http://secunia.com/advisories/42648 Common Vulnerability Exposure (CVE) ID: CVE-2010-4040 BugTraq ID: 44241 http://www.securityfocus.com/bid/44241 http://www.mandriva.com/security/advisories?name=MDVSA-2011:039 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7646 http://secunia.com/advisories/41888 http://secunia.com/advisories/43068 SuSE Security Announcement: SUSE-SR:2011:002 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html http://www.vupen.com/english/advisories/2010/2731 http://www.vupen.com/english/advisories/2011/0212 http://www.vupen.com/english/advisories/2011/0552 Common Vulnerability Exposure (CVE) ID: CVE-2011-0778 Debian Security Information: DSA-2166 (Google Search) http://www.debian.org/security/2011/dsa-2166 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14228 http://secunia.com/advisories/43368 http://www.vupen.com/english/advisories/2011/0408 Common Vulnerability Exposure (CVE) ID: CVE-2010-2901 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11997 http://secunia.com/advisories/40743 Common Vulnerability Exposure (CVE) ID: CVE-2010-4042 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6654 Common Vulnerability Exposure (CVE) ID: CVE-2010-1791 http://lists.apple.com/archives/security-announce/2010//Jul/msg00001.html http://lists.apple.com/archives/security-announce/2010//Sep/msg00002.html http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html BugTraq ID: 42020 http://www.securityfocus.com/bid/42020 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11802 http://secunia.com/advisories/42314 Common Vulnerability Exposure (CVE) ID: CVE-2010-4198 BugTraq ID: 45719 http://www.securityfocus.com/bid/45719 http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052906.html https://bugs.webkit.org/show_bug.cgi?id=45611 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12157 http://www.redhat.com/support/errata/RHSA-2011-0177.html http://secunia.com/advisories/43086 http://www.vupen.com/english/advisories/2011/0216 Common Vulnerability Exposure (CVE) ID: CVE-2010-4197 BugTraq ID: 45720 http://www.securityfocus.com/bid/45720 http://trac.webkit.org/changeset/70594 https://bugs.webkit.org/show_bug.cgi?id=48349 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12266 Common Vulnerability Exposure (CVE) ID: CVE-2010-4204 BugTraq ID: 45718 http://www.securityfocus.com/bid/45718 http://trac.webkit.org/changeset/70517 https://bugs.webkit.org/show_bug.cgi?id=48281 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12174 Common Vulnerability Exposure (CVE) ID: CVE-2010-4206 BugTraq ID: 45721 http://www.securityfocus.com/bid/45721 http://trac.webkit.org/changeset/70652 https://bugs.webkit.org/show_bug.cgi?id=48371 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11949 Common Vulnerability Exposure (CVE) ID: CVE-2010-3812 http://lists.apple.com/archives/security-announce/2010//Nov/msg00002.html BugTraq ID: 44960 http://www.securityfocus.com/bid/44960 http://trac.webkit.org/changeset/68705 http://www.zerodayinitiative.com/advisories/ZDI-10-257/ https://bugs.webkit.org/show_bug.cgi?id=46848 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11689 http://www.vupen.com/english/advisories/2010/3046 XForce ISS Database: safari-text-objects-code-execution(63350) https://exchange.xforce.ibmcloud.com/vulnerabilities/63350 Common Vulnerability Exposure (CVE) ID: CVE-2010-3813 http://trac.webkit.org/changeset/63622 https://bugs.webkit.org/show_bug.cgi?id=42500 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12293 Common Vulnerability Exposure (CVE) ID: CVE-2010-3255 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11736 Common Vulnerability Exposure (CVE) ID: CVE-2010-3119 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12107 Common Vulnerability Exposure (CVE) ID: CVE-2010-3113 BugTraq ID: 44199 http://www.securityfocus.com/bid/44199 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11901 http://secunia.com/advisories/41856 http://www.ubuntu.com/usn/USN-1006-1 http://www.vupen.com/english/advisories/2010/2722 Common Vulnerability Exposure (CVE) ID: CVE-2010-1814 BugTraq ID: 43083 http://www.securityfocus.com/bid/43083 XForce ISS Database: appleios-formmenus-code-exec(61701) https://exchange.xforce.ibmcloud.com/vulnerabilities/61701 Common Vulnerability Exposure (CVE) ID: CVE-2010-1812 BugTraq ID: 43079 http://www.securityfocus.com/bid/43079 XForce ISS Database: appleios-selections-code-exec(61699) https://exchange.xforce.ibmcloud.com/vulnerabilities/61699 Common Vulnerability Exposure (CVE) ID: CVE-2010-1815 BugTraq ID: 43081 http://www.securityfocus.com/bid/43081 XForce ISS Database: appleios-scrollbars-code-exec(61702) https://exchange.xforce.ibmcloud.com/vulnerabilities/61702 Common Vulnerability Exposure (CVE) ID: CVE-2010-3115 BugTraq ID: 44203 http://www.securityfocus.com/bid/44203 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11953 Common Vulnerability Exposure (CVE) ID: CVE-2010-1807 http://lists.apple.com/archives/security-announce/2010//Sep/msg00001.html BugTraq ID: 43047 http://www.securityfocus.com/bid/43047 http://www.computerworld.com/s/article/9195058/Researcher_to_release_Web_based_Android_attack https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11964 Common Vulnerability Exposure (CVE) ID: CVE-2010-3114 BugTraq ID: 44201 http://www.securityfocus.com/bid/44201 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11577 Common Vulnerability Exposure (CVE) ID: CVE-2010-3116 BugTraq ID: 44200 http://www.securityfocus.com/bid/44200 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11909 Common Vulnerability Exposure (CVE) ID: CVE-2010-3257 BugTraq ID: 44204 http://www.securityfocus.com/bid/44204 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12138 Common Vulnerability Exposure (CVE) ID: CVE-2010-3259 BugTraq ID: 44206 http://www.securityfocus.com/bid/44206 https://technet.microsoft.com/library/security/msvr11-002 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11221 Common Vulnerability Exposure (CVE) ID: CVE-2010-1780 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10964 Common Vulnerability Exposure (CVE) ID: CVE-2010-1782 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11935 SuSE Security Announcement: SUSE-SR:2010:018 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html Common Vulnerability Exposure (CVE) ID: CVE-2010-1784 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11766 Common Vulnerability Exposure (CVE) ID: CVE-2010-1785 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11941 Common Vulnerability Exposure (CVE) ID: CVE-2010-1786 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11837 Common Vulnerability Exposure (CVE) ID: CVE-2010-1787 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11877 Common Vulnerability Exposure (CVE) ID: CVE-2010-1788 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11962 Common Vulnerability Exposure (CVE) ID: CVE-2010-1790 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11777 Common Vulnerability Exposure (CVE) ID: CVE-2010-1792 http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11898 Common Vulnerability Exposure (CVE) ID: CVE-2010-1793 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11923 Common Vulnerability Exposure (CVE) ID: CVE-2010-2648 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11900 Common Vulnerability Exposure (CVE) ID: CVE-2010-1386 BugTraq ID: 42500 http://www.securityfocus.com/bid/42500 Common Vulnerability Exposure (CVE) ID: CVE-2010-1392 http://lists.apple.com/archives/security-announce/2010/Jun/msg00000.html http://lists.apple.com/archives/security-announce/2010//Jun/msg00002.html http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html BugTraq ID: 40620 http://www.securityfocus.com/bid/40620 Bugtraq: 20100608 VUPEN Security Research - Apple Safari WebKit HTML Button Use-after-free Vulnerability (CVE-2010-1392) (Google Search) http://www.securityfocus.com/archive/1/511700/100/0/threaded https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7024 http://securitytracker.com/id?1024067 http://secunia.com/advisories/40105 http://secunia.com/advisories/40196 http://www.vupen.com/english/advisories/2010/1373 http://www.vupen.com/english/advisories/2010/1512 Common Vulnerability Exposure (CVE) ID: CVE-2010-1405 BugTraq ID: 40659 http://www.securityfocus.com/bid/40659 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7252 Common Vulnerability Exposure (CVE) ID: CVE-2010-1407 BugTraq ID: 41016 http://www.securityfocus.com/bid/41016 XForce ISS Database: appleios-historyreplace-info-disclosure(59629) https://exchange.xforce.ibmcloud.com/vulnerabilities/59629 Common Vulnerability Exposure (CVE) ID: CVE-2010-1416 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7401 Common Vulnerability Exposure (CVE) ID: CVE-2010-1417 BugTraq ID: 40672 http://www.securityfocus.com/bid/40672 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6876 Common Vulnerability Exposure (CVE) ID: CVE-2010-1665 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7034 http://secunia.com/advisories/39651 http://www.vupen.com/english/advisories/2010/1016 Common Vulnerability Exposure (CVE) ID: CVE-2010-1418 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6871 Common Vulnerability Exposure (CVE) ID: CVE-2010-1421 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6739 Common Vulnerability Exposure (CVE) ID: CVE-2010-1422 https://bugzilla.mozilla.org/show_bug.cgi?id=552255 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7591 Common Vulnerability Exposure (CVE) ID: CVE-2010-1501 Common Vulnerability Exposure (CVE) ID: CVE-2010-1767 BugTraq ID: 39603 http://www.securityfocus.com/bid/39603 http://osvdb.org/64002 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11140 http://secunia.com/advisories/39544 Common Vulnerability Exposure (CVE) ID: CVE-2010-1664 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6878 Common Vulnerability Exposure (CVE) ID: CVE-2010-1758 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7335 Common Vulnerability Exposure (CVE) ID: CVE-2010-1759 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7005 Common Vulnerability Exposure (CVE) ID: CVE-2010-1760 BugTraq ID: 42494 http://www.securityfocus.com/bid/42494 Common Vulnerability Exposure (CVE) ID: CVE-2010-1761 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7157 Common Vulnerability Exposure (CVE) ID: CVE-2010-1762 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7503 Common Vulnerability Exposure (CVE) ID: CVE-2010-1770 http://zerodayinitiative.com/advisories/ZDI-10-093/ https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7099 http://secunia.com/advisories/40072 Common Vulnerability Exposure (CVE) ID: CVE-2010-1771 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6862 XForce ISS Database: safari-webkit-fonts-ce(59214) https://exchange.xforce.ibmcloud.com/vulnerabilities/59214 Common Vulnerability Exposure (CVE) ID: CVE-2010-1772 http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044023.html http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044031.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11661 http://secunia.com/advisories/40557 http://www.vupen.com/english/advisories/2010/1801 Common Vulnerability Exposure (CVE) ID: CVE-2010-1773 BugTraq ID: 41575 http://www.securityfocus.com/bid/41575 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11830 Common Vulnerability Exposure (CVE) ID: CVE-2010-1774 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7476 XForce ISS Database: safari-webkit-htmltables-ce(59218) https://exchange.xforce.ibmcloud.com/vulnerabilities/59218 Common Vulnerability Exposure (CVE) ID: CVE-2010-2264 BugTraq ID: 40756 http://www.securityfocus.com/bid/40756
Copyright	Copyright (c) 2011 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.