WebKit Table Handling Remote Code Execution Vulnerability

Bugtraq ID:	41054
Class:	Boundary Condition Error
CVE:	CVE-2010-1769
Remote:	Yes
Local:	No
Published:	Jun 21 2010 12:00AM
Updated:	Jun 21 2010 12:00AM
Credit:	wushi of team509
Vulnerable:	WebKit Open Source Project WebKit r52833 WebKit Open Source Project WebKit r52401 WebKit Open Source Project WebKit r51295 WebKit Open Source Project WebKit r38566 WebKit Open Source Project WebKit 0 Apple iTunes 9.0.2 Apple iTunes 9.0.1 .8 Apple iTunes 9.0.1 Apple iTunes 9.0 Apple iTunes 9.1 Apple iTunes 8.2 Apple iTunes 8.1 Apple iTunes 8.0.2.20 Apple iTunes 8.0 Apple iPod Touch 3.1.3 Apple iPod Touch 3.1.2 Apple iPod Touch 3.1.1 Apple iPod Touch 2.2.1 Apple iPod Touch 2.0.2 Apple iPod Touch 2.0.1 Apple iPod Touch 3.0 Apple iPod Touch 2.2 Apple iPod Touch 2.1 Apple iPod Touch 2.0 Apple iPhone 3.1.3 Apple iPhone 3.1.2 Apple iPhone 3.0.1 Apple iPhone 2.2.1 Apple iPhone 2.0.2 Apple iPhone 2.0.1 Apple iPhone 3.1 Apple iPhone 3.0 Apple iPhone 2.2 Apple iPhone 2.1 Apple iPhone 2.0
Not Vulnerable:	Apple iTunes 9.2 Apple iOS 4

WebKit Table Handling Remote Code Execution Vulnerability

WebKit is prone to a remote code-execution vulnerability.

An attacker can exploit this issue by enticing an unsuspecting user into viewing a malicious webpage.

Successful exploits can allow the attacker to execute arbitrary code in the context of the application. Failed exploit attempts will result in a denial-of-service condition.

NOTE: This issue was previously covered in BID 41016 (Apple iPhone/iPod touch Prior to iOS 4 Multiple Vulnerabilities) but has been given its own record to better document it.

WebKit Table Handling Remote Code Execution Vulnerability

References:

• iOS Homepage (Apple)
  
• iPhone Product Page (Apple)
  
• iPod touch Product Page (Apple)