WebKit 'libxml' Context Handling Remote Code Execution Vulnerability

Bugtraq ID:	40668
Class:	Unknown
CVE:	CVE-2010-1415
Remote:	Yes
Local:	No
Published:	Jun 07 2010 12:00AM
Updated:	Mar 19 2015 09:31AM
Credit:	Aki Helin
Vulnerable:	WebKit Open Source Project WebKit 1.2.3 WebKit Open Source Project WebKit 1.2.2 WebKit Open Source Project WebKit r52833 WebKit Open Source Project WebKit r52401 WebKit Open Source Project WebKit r51295 WebKit Open Source Project WebKit r38566 WebKit Open Source Project WebKit 1.2.2-1 WebKit Open Source Project WebKit 0 Ubuntu Ubuntu Linux 9.10 sparc Ubuntu Ubuntu Linux 9.10 powerpc Ubuntu Ubuntu Linux 9.10 lpia Ubuntu Ubuntu Linux 9.10 i386 Ubuntu Ubuntu Linux 9.10 amd64 Ubuntu Ubuntu Linux 10.10 powerpc Ubuntu Ubuntu Linux 10.10 i386 Ubuntu Ubuntu Linux 10.10 amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 amd64 Mandriva Linux Mandrake 2010.1 x86_64 Mandriva Linux Mandrake 2010.1 Apple Safari 4.0.5 for Windows Apple Safari 4.0.5 Apple Safari 4.0.4 for Windows Apple Safari 4.0.4 Apple Safari 4.0.3 for Windows Apple Safari 4.0.3 Apple Safari 4.0.2 for Windows Apple Safari 4.0.2 Apple Safari 4.0.1 Apple Safari 4 for Windows Apple Safari 4 Beta Apple Safari 4 Apple iTunes 9.0.2 Apple iTunes 9.0.1 .8 Apple iTunes 9.0.1 Apple iTunes 9.0 Apple iTunes 9.1 Apple iTunes 8.2 Apple iTunes 8.1 Apple iTunes 8.0.2.20 Apple iTunes 8.0 Apple iPod Touch 3.1.3 Apple iPod Touch 3.1.2 Apple iPod Touch 3.1.1 Apple iPod Touch 2.2.1 Apple iPod Touch 2.0.2 Apple iPod Touch 2.0.1 Apple iPod Touch 3.0 Apple iPod Touch 2.2 Apple iPod Touch 2.1 Apple iPod Touch 2.0 Apple iPhone 3.1.3 Apple iPhone 3.1.2 Apple iPhone 3.0.1 Apple iPhone 2.2.1 Apple iPhone 2.0.2 Apple iPhone 2.0.1 Apple iPhone 3.1 Apple iPhone 3.0 Apple iPhone 2.2 Apple iPhone 2.1 Apple iPhone 2.0 Apple iPad 3.2.1 Apple iPad 3.2.2 Apple iPad 3.2 Apple iPad 0 Apple iOS 4.0.2 Apple iOS 4.0.1 Apple iOS 3.2.2 Apple iOS 3.2.1 Apple iOS 4.2 beta Apple iOS 4.1 Apple iOS 4 Apple iOS 3.2
Not Vulnerable:	WebKit Open Source Project WebKit 1.2.5 Apple Safari 5.0 for Windows Apple Safari 5.0 Apple Safari 4.1 Apple iTunes 9.2 Apple iOS 4.2 Apple iOS 4

WebKit 'libxml' Context Handling Remote Code Execution Vulnerability

WebKit is prone to a remote code-execution vulnerability.

An attacker can exploit this issue by enticing an unsuspecting user into viewing a malicious webpage.

Successful exploits can allow the attacker to execute arbitrary code in the context of the application. Failed exploit attempts will result in a denial-of-service condition.

NOTE: This issue was previously covered in BID 40620 (Apple Safari Prior to 5.0 and 4.1 Multiple Security Vulnerabilities) but has been given its own record to better document it.

WebKit 'libxml' Context Handling Remote Code Execution Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

WebKit 'libxml' Context Handling Remote Code Execution Vulnerability

Solution:
Updates are available. Please see the references for more information.


Apple Safari 4

• Apple Safari4.1Tiger.dmg
  http://www.apple.com/safari/download/


• Apple Safari5.0Leopard.dmg
  http://www.apple.com/safari/download/


• Apple Safari5.0SnowLeopard.dmg
  http://www.apple.com/safari/download/

Ubuntu Ubuntu Linux 9.10 sparc

• Ubuntu libwebkit-1.0-2-dbg_1.2.5-0ubuntu0.9.10.1_sparc.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2-dbg_1.2.5-0 ubuntu0.9.10.1_sparc.deb


• Ubuntu libwebkit-1.0-2_1.2.5-0ubuntu0.9.10.1_sparc.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2_1.2.5-0ubun tu0.9.10.1_sparc.deb


• Ubuntu libwebkit-1.0-common_1.2.5-0ubuntu0.9.10.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-com mon_1.2.5-0ubuntu0.9.10.1_all.deb


• Ubuntu libwebkit-dev_1.2.5-0ubuntu0.9.10.1_sparc.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-dev_1.2.5-0ubuntu 0.9.10.1_sparc.deb

Apple Safari 4 for Windows

• Apple Safari_Setup-safari5.exe
  http://www.apple.com/safari/download/


• Apple SafariQuickTimeSetup-safari5.exe
  http://www.apple.com/safari/download/


• Apple SafariSetup-safari5.exe
  http://www.apple.com/safari/download/

Ubuntu Ubuntu Linux 9.10 powerpc

• Ubuntu libwebkit-1.0-2-dbg_1.2.5-0ubuntu0.9.10.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2-dbg_1.2.5-0 ubuntu0.9.10.1_powerpc.deb


• Ubuntu libwebkit-1.0-2_1.2.5-0ubuntu0.9.10.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2_1.2.5-0ubun tu0.9.10.1_powerpc.deb


• Ubuntu libwebkit-1.0-common_1.2.5-0ubuntu0.9.10.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-com mon_1.2.5-0ubuntu0.9.10.1_all.deb


• Ubuntu libwebkit-dev_1.2.5-0ubuntu0.9.10.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-dev_1.2.5-0ubuntu 0.9.10.1_powerpc.deb

Ubuntu Ubuntu Linux 9.10 lpia

• Ubuntu libwebkit-1.0-2-dbg_1.2.5-0ubuntu0.9.10.1_lpia.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2-dbg_1.2.5-0 ubuntu0.9.10.1_lpia.deb


• Ubuntu libwebkit-1.0-2_1.2.5-0ubuntu0.9.10.1_lpia.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2_1.2.5-0ubun tu0.9.10.1_lpia.deb


• Ubuntu libwebkit-1.0-common_1.2.5-0ubuntu0.9.10.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-com mon_1.2.5-0ubuntu0.9.10.1_all.deb


• Ubuntu libwebkit-dev_1.2.5-0ubuntu0.9.10.1_lpia.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-dev_1.2.5-0ubuntu 0.9.10.1_lpia.deb

Mandriva Linux Mandrake 2010.1 x86_64

• Mandriva lib64webkitgtk1.0-devel-1.2.7-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64webkitgtk1.0_2-1.2.7-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva webkit-1.2.7-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva webkit-gtklauncher-1.2.7-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva webkit-jsc-1.2.7-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva webkit1.0-1.2.7-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva webkit1.0-webinspector-1.2.7-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 10.10 amd64

• Ubuntu gir1.0-webkit-1.0_1.2.5-0ubuntu0.10.10.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/w/webkit/gir1.0-webkit -1.0_1.2.5-0ubuntu0.10.10.1_amd64.deb


• Ubuntu libwebkit-1.0-2-dbg_1.2.5-0ubuntu0.10.10.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-2-d bg_1.2.5-0ubuntu0.10.10.1_amd64.deb


• Ubuntu libwebkit-1.0-2_1.2.5-0ubuntu0.10.10.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-2_1 .2.5-0ubuntu0.10.10.1_amd64.deb


• Ubuntu libwebkit-1.0-common_1.2.5-0ubuntu0.10.10.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-com mon_1.2.5-0ubuntu0.10.10.1_all.deb


• Ubuntu libwebkit-dev_1.2.5-0ubuntu0.10.10.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-dev_1.2 .5-0ubuntu0.10.10.1_amd64.deb

Ubuntu Ubuntu Linux 10.04 powerpc

• Ubuntu gir1.0-webkit-1.0_1.2.5-0ubuntu0.10.04.1_powerpc.deb
  http://ports.ubuntu.com/pool/universe/w/webkit/gir1.0-webkit-1.0_1.2.5 -0ubuntu0.10.04.1_powerpc.deb


• Ubuntu libwebkit-1.0-2-dbg_1.2.5-0ubuntu0.10.04.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2-dbg_1.2.5-0 ubuntu0.10.04.1_powerpc.deb


• Ubuntu libwebkit-1.0-2_1.2.5-0ubuntu0.10.04.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2_1.2.5-0ubun tu0.10.04.1_powerpc.deb


• Ubuntu libwebkit-1.0-common_1.2.5-0ubuntu0.10.04.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-com mon_1.2.5-0ubuntu0.10.04.1_all.deb


• Ubuntu libwebkit-dev_1.2.5-0ubuntu0.10.04.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-dev_1.2.5-0ubuntu 0.10.04.1_powerpc.deb

Ubuntu Ubuntu Linux 9.10 i386

• Ubuntu libwebkit-1.0-2-dbg_1.2.5-0ubuntu0.9.10.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-2-d bg_1.2.5-0ubuntu0.9.10.1_i386.deb


• Ubuntu libwebkit-1.0-2_1.2.5-0ubuntu0.9.10.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-2_1 .2.5-0ubuntu0.9.10.1_i386.deb


• Ubuntu libwebkit-1.0-common_1.2.5-0ubuntu0.9.10.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-com mon_1.2.5-0ubuntu0.9.10.1_all.deb


• Ubuntu libwebkit-dev_1.2.5-0ubuntu0.9.10.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-dev_1.2 .5-0ubuntu0.9.10.1_i386.deb

Ubuntu Ubuntu Linux 10.04 amd64

• Ubuntu gir1.0-webkit-1.0_1.2.5-0ubuntu0.10.04.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/w/webkit/gir1.0-webkit -1.0_1.2.5-0ubuntu0.10.04.1_amd64.deb


• Ubuntu libwebkit-1.0-2-dbg_1.2.5-0ubuntu0.10.04.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-2-d bg_1.2.5-0ubuntu0.10.04.1_amd64.deb


• Ubuntu libwebkit-1.0-2_1.2.5-0ubuntu0.10.04.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-2_1 .2.5-0ubuntu0.10.04.1_amd64.deb


• Ubuntu libwebkit-1.0-common_1.2.5-0ubuntu0.10.04.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-com mon_1.2.5-0ubuntu0.10.04.1_all.deb


• Ubuntu libwebkit-dev_1.2.5-0ubuntu0.10.04.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-dev_1.2 .5-0ubuntu0.10.04.1_amd64.deb

Ubuntu Ubuntu Linux 9.10 amd64

• Ubuntu libwebkit-1.0-2-dbg_1.2.5-0ubuntu0.9.10.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-2-d bg_1.2.5-0ubuntu0.9.10.1_amd64.deb


• Ubuntu libwebkit-1.0-2_1.2.5-0ubuntu0.9.10.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-2_1 .2.5-0ubuntu0.9.10.1_amd64.deb


• Ubuntu libwebkit-1.0-common_1.2.5-0ubuntu0.9.10.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-com mon_1.2.5-0ubuntu0.9.10.1_all.deb


• Ubuntu libwebkit-dev_1.2.5-0ubuntu0.9.10.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-dev_1.2 .5-0ubuntu0.9.10.1_amd64.deb

Apple iTunes 9.1

• Apple APPLE-SA-2010-06-16-1-iTunes64Setup.exe
  For 64-bit Windows XP / Vista / Windows 7
  http://www.apple.com/itunes/download/


• Apple APPLE-SA-2010-06-16-1-iTunesSetup.exe
  For Windows XP / Vista / Windows 7
  http://www.apple.com/itunes/download/


• Apple iTunes9.2.dmg
  for Mac OS X
  http://www.apple.com/itunes/download/

Ubuntu Ubuntu Linux 10.04 i386

• Ubuntu gir1.0-webkit-1.0_1.2.5-0ubuntu0.10.04.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/w/webkit/gir1.0-webkit -1.0_1.2.5-0ubuntu0.10.04.1_i386.deb


• Ubuntu libwebkit-1.0-2-dbg_1.2.5-0ubuntu0.10.04.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-2-d bg_1.2.5-0ubuntu0.10.04.1_i386.deb


• Ubuntu libwebkit-1.0-2_1.2.5-0ubuntu0.10.04.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-2_1 .2.5-0ubuntu0.10.04.1_i386.deb


• Ubuntu libwebkit-1.0-common_1.2.5-0ubuntu0.10.04.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-com mon_1.2.5-0ubuntu0.10.04.1_all.deb


• Ubuntu libwebkit-dev_1.2.5-0ubuntu0.10.04.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-dev_1.2 .5-0ubuntu0.10.04.1_i386.deb

Mandriva Linux Mandrake 2010.1

• Mandriva libwebkitgtk1.0-devel-1.2.7-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libwebkitgtk1.0_2-1.2.7-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva webkit-1.2.7-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva webkit-gtklauncher-1.2.7-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva webkit-jsc-1.2.7-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva webkit1.0-1.2.7-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva webkit1.0-webinspector-1.2.7-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 10.10 powerpc

• Ubuntu gir1.0-webkit-1.0_1.2.5-0ubuntu0.10.10.1_powerpc.deb
  http://ports.ubuntu.com/pool/universe/w/webkit/gir1.0-webkit-1.0_1.2.5 -0ubuntu0.10.10.1_powerpc.deb


• Ubuntu libwebkit-1.0-2-dbg_1.2.5-0ubuntu0.10.10.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2-dbg_1.2.5-0 ubuntu0.10.10.1_powerpc.deb


• Ubuntu libwebkit-1.0-2_1.2.5-0ubuntu0.10.10.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2_1.2.5-0ubun tu0.10.10.1_powerpc.deb


• Ubuntu libwebkit-1.0-common_1.2.5-0ubuntu0.10.10.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-com mon_1.2.5-0ubuntu0.10.10.1_all.deb


• Ubuntu libwebkit-dev_1.2.5-0ubuntu0.10.10.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-dev_1.2.5-0ubuntu 0.10.10.1_powerpc.deb

Ubuntu Ubuntu Linux 10.10 i386

• Ubuntu gir1.0-webkit-1.0_1.2.5-0ubuntu0.10.10.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/w/webkit/gir1.0-webkit -1.0_1.2.5-0ubuntu0.10.10.1_i386.deb


• Ubuntu libwebkit-1.0-2-dbg_1.2.5-0ubuntu0.10.10.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-2-d bg_1.2.5-0ubuntu0.10.10.1_i386.deb


• Ubuntu libwebkit-1.0-2_1.2.5-0ubuntu0.10.10.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-2_1 .2.5-0ubuntu0.10.10.1_i386.deb


• Ubuntu libwebkit-1.0-common_1.2.5-0ubuntu0.10.10.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-com mon_1.2.5-0ubuntu0.10.10.1_all.deb


• Ubuntu libwebkit-dev_1.2.5-0ubuntu0.10.10.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-dev_1.2 .5-0ubuntu0.10.10.1_i386.deb

Ubuntu Ubuntu Linux 10.04 sparc

• Ubuntu gir1.0-webkit-1.0_1.2.5-0ubuntu0.10.04.1_sparc.deb
  http://ports.ubuntu.com/pool/universe/w/webkit/gir1.0-webkit-1.0_1.2.5 -0ubuntu0.10.04.1_sparc.deb


• Ubuntu libwebkit-1.0-2-dbg_1.2.5-0ubuntu0.10.04.1_sparc.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2-dbg_1.2.5-0 ubuntu0.10.04.1_sparc.deb


• Ubuntu libwebkit-1.0-2_1.2.5-0ubuntu0.10.04.1_sparc.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2_1.2.5-0ubun tu0.10.04.1_sparc.deb


• Ubuntu libwebkit-1.0-common_1.2.5-0ubuntu0.10.04.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-com mon_1.2.5-0ubuntu0.10.04.1_all.deb


• Ubuntu libwebkit-dev_1.2.5-0ubuntu0.10.04.1_sparc.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-dev_1.2.5-0ubuntu 0.10.04.1_sparc.deb

Apple Safari 4.0.1

• Apple Safari4.1Tiger.dmg
  http://www.apple.com/safari/download/


• Apple Safari5.0Leopard.dmg
  http://www.apple.com/safari/download/


• Apple Safari5.0SnowLeopard.dmg
  http://www.apple.com/safari/download/

Apple Safari 4.0.2

• Apple Safari4.1Tiger.dmg
  http://www.apple.com/safari/download/


• Apple Safari5.0Leopard.dmg
  http://www.apple.com/safari/download/


• Apple Safari5.0SnowLeopard.dmg
  http://www.apple.com/safari/download/

Apple Safari 4.0.2 for Windows

• Apple Safari_Setup-safari5.exe
  http://www.apple.com/safari/download/


• Apple SafariQuickTimeSetup-safari5.exe
  http://www.apple.com/safari/download/


• Apple SafariSetup-safari5.exe
  http://www.apple.com/safari/download/

Apple Safari 4.0.3 for Windows

• Apple Safari_Setup-safari5.exe
  http://www.apple.com/safari/download/


• Apple SafariQuickTimeSetup-safari5.exe
  http://www.apple.com/safari/download/


• Apple SafariSetup-safari5.exe
  http://www.apple.com/safari/download/

Apple Safari 4.0.3

• Apple Safari4.1Tiger.dmg
  http://www.apple.com/safari/download/


• Apple Safari5.0Leopard.dmg
  http://www.apple.com/safari/download/


• Apple Safari5.0SnowLeopard.dmg
  http://www.apple.com/safari/download/

Apple Safari 4.0.4 for Windows

• Apple Safari_Setup-safari5.exe
  http://www.apple.com/safari/download/


• Apple SafariQuickTimeSetup-safari5.exe
  http://www.apple.com/safari/download/


• Apple SafariSetup-safari5.exe
  http://www.apple.com/safari/download/

Apple Safari 4.0.4

• Apple Safari4.1Tiger.dmg
  http://www.apple.com/safari/download/


• Apple Safari5.0Leopard.dmg
  http://www.apple.com/safari/download/


• Apple Safari5.0SnowLeopard.dmg
  http://www.apple.com/safari/download/

Apple Safari 4.0.5 for Windows

• Apple Safari_Setup-safari5.exe
  http://www.apple.com/safari/download/


• Apple SafariQuickTimeSetup-safari5.exe
  http://www.apple.com/safari/download/


• Apple SafariSetup-safari5.exe
  http://www.apple.com/safari/download/

Apple Safari 4.0.5

• Apple Safari4.1Tiger.dmg
  http://www.apple.com/safari/download/


• Apple Safari5.0Leopard.dmg
  http://www.apple.com/safari/download/


• Apple Safari5.0SnowLeopard.dmg
  http://www.apple.com/safari/download/

WebKit 'libxml' Context Handling Remote Code Execution Vulnerability

References:

• Apple Safari Homepage (Apple)
  
• webkit 1.2.5 security update tracking bug (Ubuntu)
  
• Webkit Homepage (Webkit)