WebKit ':visited' CSS Pseudo-class Information Disclosure Vulnerability

Bugtraq ID:	40756
Class:	Design Error
CVE:	CVE-2010-2264 CVE-2010-5069
Remote:	Yes
Local:	No
Published:	Jun 07 2010 12:00AM
Updated:	Dec 12 2011 09:38PM
Credit:	Apple
Vulnerable:	WebKit Open Source Project WebKit 1.2.3 WebKit Open Source Project WebKit 1.2.2 WebKit Open Source Project WebKit r52833 WebKit Open Source Project WebKit r52401 WebKit Open Source Project WebKit r51295 WebKit Open Source Project WebKit r38566 WebKit Open Source Project WebKit 1.2.2-1 WebKit Open Source Project WebKit 0 Ubuntu Ubuntu Linux 9.10 sparc Ubuntu Ubuntu Linux 9.10 powerpc Ubuntu Ubuntu Linux 9.10 lpia Ubuntu Ubuntu Linux 9.10 i386 Ubuntu Ubuntu Linux 9.10 amd64 Ubuntu Ubuntu Linux 10.10 powerpc Ubuntu Ubuntu Linux 10.10 i386 Ubuntu Ubuntu Linux 10.10 amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 amd64 Mandriva Linux Mandrake 2010.1 x86_64 Mandriva Linux Mandrake 2010.1 Google Chrome 4.1.249 1064 Google Chrome 4.1.249 1059 Google Chrome 4.1.249 1036 Google Chrome 4.1.249 1036 Google Chrome 4.1.249 .1045 Google Chrome 4.1.249 .1042 Google Chrome 4.0.249 .89 Google Chrome 4.0.249 .78 Google Chrome 4.1.249.1063 Google Chrome 4.1.249.1062 Google Chrome 4.1.249.1061 Google Chrome 4.1.249.1060 Google Chrome 4.1.249.1058 Google Chrome 4.1.249.1057 Google Chrome 4.1.249.1056 Google Chrome 4.1.249.1055 Google Chrome 4.1.249.1054 Google Chrome 4.1.249.1053 Google Chrome 4.1.249.1052 Google Chrome 4.1.249.1051 Google Chrome 4.1.249.1050 Google Chrome 4.1.249.1049 Google Chrome 4.1.249.1048 Google Chrome 4.1.249.1047 Google Chrome 4.1.249.1046 Google Chrome 4.1.249.1044 Google Chrome 4.1.249.1043 Google Chrome 4.1.249.1041 Google Chrome 4.1.249.1040 Google Chrome 4.1.249.1039 Google Chrome 4.1.249.1038 Google Chrome 4.1.249.1037 Google Chrome 4.1.249.1035 Google Chrome 4.1.249.1034 Google Chrome 4.1.249.1033 Google Chrome 4.1.249.1032 Google Chrome 4.1.249.1031 Google Chrome 4.1.249.1030 Google Chrome 4.1.249.1029 Google Chrome 4.1.249.1028 Google Chrome 4.1.249.1027 Google Chrome 4.1.249.1026 Google Chrome 4.1.249.1025 Google Chrome 4.1.249.1024 Google Chrome 4.1.249.1023 Google Chrome 4.1.249.1022 Google Chrome 4.1.249.1021 Google Chrome 4.1.249.1020 Google Chrome 4.1.249.1019 Google Chrome 4.1.249.1018 Google Chrome 4.1.249.1017 Google Chrome 4.1.249.1016 Google Chrome 4.1.249.1015 Google Chrome 4.1.249.1014 Google Chrome 4.1.249.1013 Google Chrome 4.1.249.1012 Google Chrome 4.1.249.1011 Google Chrome 4.1.249.1010 Google Chrome 4.1.249.1009 Google Chrome 4.1.249.1008 Google Chrome 4.1.249.1007 Google Chrome 4.1.249.1006 Google Chrome 4.1.249.1004 Google Chrome 4.1.249.1001 Google Chrome 4.1.249.0 Google Chrome 4.1 Beta Google Chrome 4.0.305.0 Google Chrome 4.0.304.0 Google Chrome 4.0.303.0 Google Chrome 4.0.302.3 Google Chrome 4.0.302.2 Google Chrome 4.0.302.1 Google Chrome 4.0.302.0 Google Chrome 4.0.301.0 Google Chrome 4.0.300.0 Google Chrome 4.0.299.0 Google Chrome 4.0.296.0 Google Chrome 4.0.295.0 Google Chrome 4.0.294.0 Google Chrome 4.0.292.0 Google Chrome 4.0.290.0 Google Chrome 4.0.289.0 Google Chrome 4.0.288.1 Google Chrome 4.0.288.0 Google Chrome 4.0.287.0 Google Chrome 4.0.286.0 Google Chrome 4.0.278.0 Google Chrome 4.0.277.0 Google Chrome 4.0.276.0 Google Chrome 4.0.275.1 Google Chrome 4.0.275.0 Google Chrome 4.0.272.0 Google Chrome 4.0.271.0 Google Chrome 4.0.249.78 Beta Google Chrome 4.0.224.0 Google Chrome 4.0.223.8 Google Chrome 4.0.223.7 Google Chrome 4.0.223.5 Google Chrome 4.0.223.4 Google Chrome 4.0.223.2 Google Chrome 4.0.223.1 Google Chrome 4.0.223.0 Google Chrome 4.0.222.5 Google Chrome 4.0.222.12 Google Chrome 4.0.222.1 Google Chrome 4.0.222.0 Google Chrome 4.0.221.8 Google Chrome 4.0.212.1 Google Chrome 4.0.212.0 Google Chrome 4.0.211.0 Apple Safari 4.0.5 for Windows Apple Safari 4.0.5 Apple Safari 4.0.4 for Windows Apple Safari 4.0.4 Apple Safari 4.0.3 for Windows Apple Safari 4.0.3 Apple Safari 4.0.2 for Windows Apple Safari 4.0.2 Apple Safari 4.0.1 Apple Safari 4 for Windows Apple Safari 4 Beta Apple Safari 4
Not Vulnerable:	WebKit Open Source Project WebKit 1.2.5 Apple Safari 5.0 for Windows Apple Safari 5.0 Apple Safari 4.1

WebKit ':visited' CSS Pseudo-class Information Disclosure Vulnerability

WebKit is prone to an information-disclosure vulnerability.

An attacker can exploit this issue by enticing an unsuspecting user into viewing a malicious webpage.

Successful exploits can allow the attacker to obtain sensitive information.

NOTE: This issue was previously covered in BID 40620 (Apple Safari Prior to 5.0 and 4.1 Multiple Security Vulnerabilities) but has been given its own record to better document it.

WebKit ':visited' CSS Pseudo-class Information Disclosure Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

WebKit ':visited' CSS Pseudo-class Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references for more information.


Apple Safari 4 for Windows

• Apple Safari_Setup-safari5.exe
  http://www.apple.com/safari/download/


• Apple SafariQuickTimeSetup-safari5.exe
  http://www.apple.com/safari/download/


• Apple SafariSetup-safari5.exe
  http://www.apple.com/safari/download/

Ubuntu Ubuntu Linux 9.10 powerpc

• Ubuntu libwebkit-1.0-2-dbg_1.2.5-0ubuntu0.9.10.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2-dbg_1.2.5-0 ubuntu0.9.10.1_powerpc.deb


• Ubuntu libwebkit-1.0-2_1.2.5-0ubuntu0.9.10.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2_1.2.5-0ubun tu0.9.10.1_powerpc.deb


• Ubuntu libwebkit-1.0-common_1.2.5-0ubuntu0.9.10.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-com mon_1.2.5-0ubuntu0.9.10.1_all.deb


• Ubuntu libwebkit-dev_1.2.5-0ubuntu0.9.10.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-dev_1.2.5-0ubuntu 0.9.10.1_powerpc.deb

Ubuntu Ubuntu Linux 9.10 lpia

• Ubuntu libwebkit-1.0-2-dbg_1.2.5-0ubuntu0.9.10.1_lpia.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2-dbg_1.2.5-0 ubuntu0.9.10.1_lpia.deb


• Ubuntu libwebkit-1.0-2_1.2.5-0ubuntu0.9.10.1_lpia.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2_1.2.5-0ubun tu0.9.10.1_lpia.deb


• Ubuntu libwebkit-1.0-common_1.2.5-0ubuntu0.9.10.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-com mon_1.2.5-0ubuntu0.9.10.1_all.deb


• Ubuntu libwebkit-dev_1.2.5-0ubuntu0.9.10.1_lpia.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-dev_1.2.5-0ubuntu 0.9.10.1_lpia.deb

Ubuntu Ubuntu Linux 10.04 powerpc

• Ubuntu gir1.0-webkit-1.0_1.2.5-0ubuntu0.10.04.1_powerpc.deb
  http://ports.ubuntu.com/pool/universe/w/webkit/gir1.0-webkit-1.0_1.2.5 -0ubuntu0.10.04.1_powerpc.deb


• Ubuntu libwebkit-1.0-2-dbg_1.2.5-0ubuntu0.10.04.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2-dbg_1.2.5-0 ubuntu0.10.04.1_powerpc.deb


• Ubuntu libwebkit-1.0-2_1.2.5-0ubuntu0.10.04.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2_1.2.5-0ubun tu0.10.04.1_powerpc.deb


• Ubuntu libwebkit-1.0-common_1.2.5-0ubuntu0.10.04.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-com mon_1.2.5-0ubuntu0.10.04.1_all.deb


• Ubuntu libwebkit-dev_1.2.5-0ubuntu0.10.04.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-dev_1.2.5-0ubuntu 0.10.04.1_powerpc.deb

Ubuntu Ubuntu Linux 9.10 amd64

• Ubuntu libwebkit-1.0-2-dbg_1.2.5-0ubuntu0.9.10.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-2-d bg_1.2.5-0ubuntu0.9.10.1_amd64.deb


• Ubuntu libwebkit-1.0-2_1.2.5-0ubuntu0.9.10.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-2_1 .2.5-0ubuntu0.9.10.1_amd64.deb


• Ubuntu libwebkit-1.0-common_1.2.5-0ubuntu0.9.10.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-com mon_1.2.5-0ubuntu0.9.10.1_all.deb


• Ubuntu libwebkit-dev_1.2.5-0ubuntu0.9.10.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-dev_1.2 .5-0ubuntu0.9.10.1_amd64.deb

Ubuntu Ubuntu Linux 10.10 powerpc

• Ubuntu gir1.0-webkit-1.0_1.2.5-0ubuntu0.10.10.1_powerpc.deb
  http://ports.ubuntu.com/pool/universe/w/webkit/gir1.0-webkit-1.0_1.2.5 -0ubuntu0.10.10.1_powerpc.deb


• Ubuntu libwebkit-1.0-2-dbg_1.2.5-0ubuntu0.10.10.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2-dbg_1.2.5-0 ubuntu0.10.10.1_powerpc.deb


• Ubuntu libwebkit-1.0-2_1.2.5-0ubuntu0.10.10.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2_1.2.5-0ubun tu0.10.10.1_powerpc.deb


• Ubuntu libwebkit-1.0-common_1.2.5-0ubuntu0.10.10.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-com mon_1.2.5-0ubuntu0.10.10.1_all.deb


• Ubuntu libwebkit-dev_1.2.5-0ubuntu0.10.10.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-dev_1.2.5-0ubuntu 0.10.10.1_powerpc.deb

Apple Safari 4

• Apple Safari4.1Tiger.dmg
  http://www.apple.com/safari/download/


• Apple Safari5.0Leopard.dmg
  http://www.apple.com/safari/download/


• Apple Safari5.0SnowLeopard.dmg
  http://www.apple.com/safari/download/

Ubuntu Ubuntu Linux 9.10 sparc

• Ubuntu libwebkit-1.0-2-dbg_1.2.5-0ubuntu0.9.10.1_sparc.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2-dbg_1.2.5-0 ubuntu0.9.10.1_sparc.deb


• Ubuntu libwebkit-1.0-2_1.2.5-0ubuntu0.9.10.1_sparc.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2_1.2.5-0ubun tu0.9.10.1_sparc.deb


• Ubuntu libwebkit-1.0-common_1.2.5-0ubuntu0.9.10.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-com mon_1.2.5-0ubuntu0.9.10.1_all.deb


• Ubuntu libwebkit-dev_1.2.5-0ubuntu0.9.10.1_sparc.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-dev_1.2.5-0ubuntu 0.9.10.1_sparc.deb

Mandriva Linux Mandrake 2010.1 x86_64

• Mandriva lib64webkitgtk1.0-devel-1.2.7-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64webkitgtk1.0_2-1.2.7-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva webkit-1.2.7-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva webkit-gtklauncher-1.2.7-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva webkit-jsc-1.2.7-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva webkit1.0-1.2.7-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva webkit1.0-webinspector-1.2.7-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/download/

Apple Safari 4.0.1

• Apple Safari4.1Tiger.dmg
  http://www.apple.com/safari/download/


• Apple Safari5.0Leopard.dmg
  http://www.apple.com/safari/download/


• Apple Safari5.0SnowLeopard.dmg
  http://www.apple.com/safari/download/

Apple Safari 4.0.3 for Windows

• Apple Safari_Setup-safari5.exe
  http://www.apple.com/safari/download/


• Apple SafariQuickTimeSetup-safari5.exe
  http://www.apple.com/safari/download/


• Apple SafariSetup-safari5.exe
  http://www.apple.com/safari/download/

Apple Safari 4.0.5 for Windows

• Apple Safari_Setup-safari5.exe
  http://www.apple.com/safari/download/


• Apple SafariQuickTimeSetup-safari5.exe
  http://www.apple.com/safari/download/


• Apple SafariSetup-safari5.exe
  http://www.apple.com/safari/download/

WebKit ':visited' CSS Pseudo-class Information Disclosure Vulnerability

References:

• Apple Safari Homepage (Apple)
  
• Feasibility and Real-World Implications of Web Browser History Detection (Artur Janc)
  
• webkit 1.2.5 security update tracking bug (Ubuntu)
  
• Webkit Homepage (Webkit)