WebKit Geolocation Events Use After Free Memory Corruption Vulnerability
BID:41573
Info
WebKit Geolocation Events Use After Free Memory Corruption Vulnerability
| Bugtraq ID: | 41573 |
| Class: | Unknown |
| CVE: |
CVE-2010-1772 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 08 2010 12:00AM |
| Updated: | Apr 13 2015 09:48PM |
| Credit: | Justin Schuh |
| Vulnerable: |
WebKit Open Source Project WebKit 1.2.3 WebKit Open Source Project WebKit 1.2.2 WebKit Open Source Project WebKit 1.2.2-1 WebKit Open Source Project WebKit 0 Ubuntu Ubuntu Linux 9.10 sparc Ubuntu Ubuntu Linux 9.10 powerpc Ubuntu Ubuntu Linux 9.10 lpia Ubuntu Ubuntu Linux 9.10 i386 Ubuntu Ubuntu Linux 9.10 amd64 Ubuntu Ubuntu Linux 10.10 powerpc Ubuntu Ubuntu Linux 10.10 i386 Ubuntu Ubuntu Linux 10.10 amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 amd64 Trolltech Qt 4.6.2 Trolltech Qt 4.6.1 Trolltech Qt 4.6 S.u.S.E. openSUSE 11.3 Mandriva Linux Mandrake 2010.1 x86_64 Mandriva Linux Mandrake 2010.1 Google Chrome 5.0.375 .55 Google Chrome 5.0.375.5 Google Chrome 5.0.375.4 Google Chrome 5.0.375.38 Google Chrome 5.0.375.37 Google Chrome 5.0.375.36 Google Chrome 5.0.375.35 Google Chrome 5.0.375.34 Google Chrome 5.0.375.33 Google Chrome 5.0.375.32 Google Chrome 5.0.375.31 Google Chrome 5.0.375.30 Google Chrome 5.0.375.3 Google Chrome 5.0.375.29 Google Chrome 5.0.375.28 Google Chrome 5.0.375.27 Google Chrome 5.0.375.26 Google Chrome 5.0.375.25 Google Chrome 5.0.375.23 Google Chrome 5.0.375.22 Google Chrome 5.0.375.21 Google Chrome 5.0.375.20 Google Chrome 5.0.375.2 Google Chrome 5.0.375.19 Google Chrome 5.0.375.18 Google Chrome 5.0.375.17 Google Chrome 5.0.375.16 Google Chrome 5.0.375.15 Google Chrome 5.0.375.14 Google Chrome 5.0.375.13 Google Chrome 5.0.375.12 Google Chrome 5.0.375.11 Google Chrome 5.0.375.10 Google Chrome 5.0.375.1 Google Chrome 5.0.375.0 Google Chrome 5.0.374.0 Google Chrome 5.0.373.0 Google Chrome 5.0.372.0 Google Chrome 5.0.371.0 Google Chrome 5.0.370.0 Google Chrome 5.0.369.2 Google Chrome 5.0.369.1 Google Chrome 5.0.369.0 Google Chrome 5.0.368.0 Google Chrome 5.0.367.0 Google Chrome 5.0.366.4 Google Chrome 5.0.366.3 Google Chrome 5.0.366.2 Google Chrome 5.0.366.1 Google Chrome 5.0.366.0 Google Chrome 5.0.365.0 Google Chrome 5.0.364.0 Google Chrome 5.0.363.0 Google Chrome 5.0.362.0 Google Chrome 5.0.361.0 Google Chrome 5.0.360.5 Google Chrome 5.0.360.4 Google Chrome 5.0.360.3 Google Chrome 5.0.360.0 Google Chrome 5.0.359.0 Google Chrome 5.0.358.0 Google Chrome 5.0.357.0 Google Chrome 5.0.356.2 Google Chrome 5.0.356.1 Google Chrome 5.0.356.0 Google Chrome 5.0.355.0 Google Chrome 5.0.354.1 Google Chrome 5.0.354.0 Google Chrome 5.0.353.0 Google Chrome 5.0.351.0 Google Chrome 5.0.350.1 Google Chrome 5.0.350.0 Google Chrome 5.0.349.0 Google Chrome 5.0.348.0 Google Chrome 5.0.347.0 Google Chrome 5.0.346.0 Google Chrome 5.0.345.0 Google Chrome 5.0.344.0 Google Chrome 5.0.343.0 Google Chrome 5.0.342.9 Google Chrome 5.0.342.8 Google Chrome 5.0.342.7 Google Chrome 5.0.342.6 Google Chrome 5.0.342.5 Google Chrome 5.0.342.4 Google Chrome 5.0.342.3 Google Chrome 5.0.342.2 Google Chrome 5.0.342.1 Google Chrome 5.0.342.0 Google Chrome 5.0.341.0 Google Chrome 5.0.340.0 Google Chrome 5.0.339.0 Google Chrome 5.0.338.0 Google Chrome 5.0.337.0 Google Chrome 5.0.336.0 Google Chrome 5.0.335.4 Google Chrome 5.0.335.3 Google Chrome 5.0.335.2 Google Chrome 5.0.335.1 Google Chrome 5.0.335.0 Google Chrome 5.0.334.0 Google Chrome 5.0.333.0 Google Chrome 5.0.332.0 Google Chrome 5.0.330.0 Google Chrome 5.0.329.0 Google Chrome 5.0.328.0 Google Chrome 5.0.327.0 Google Chrome 5.0.326.0 Google Chrome 5.0.325.0 Google Chrome 5.0.324.0 Google Chrome 5.0.323.0 Google Chrome 5.0.322.2 Google Chrome 5.0.322.1 Google Chrome 5.0.322.0 Google Chrome 5.0.321.0 Google Chrome 5.0.320.0 Google Chrome 5.0.319.0 Google Chrome 5.0.318.0 Google Chrome 5.0.317.2 Google Chrome 5.0.317.1 Google Chrome 5.0.317.0 Google Chrome 5.0.316.0 Google Chrome 5.0.315.0 Google Chrome 5.0.314.1 Google Chrome 5.0.314.0 Google Chrome 5.0.313.0 Google Chrome 5.0.309.0 Google Chrome 5.0.308.0 Google Chrome 5.0.307.9 Google Chrome 5.0.307.8 Google Chrome 5.0.307.7 Google Chrome 5.0.307.6 Google Chrome 5.0.307.5 Google Chrome 5.0.307.4 Google Chrome 5.0.307.3 Google Chrome 5.0.307.11 Google Chrome 5.0.307.10 Google Chrome 5.0.307.1 Google Chrome 5.0.306.1 Google Chrome 5.0.306.0 |
| Not Vulnerable: |
WebKit Open Source Project WebKit 1.2.5 Trolltech Qt 4.6.3 Google Chrome 5.0.375 .70 |
Discussion
WebKit Geolocation Events Use After Free Memory Corruption Vulnerability
WebKit is prone to a remote memory-corruption vulnerability.
Successful exploits may allow the attacker to execute arbitrary code in the context of the application. Failed exploit attempts will result in a denial-of-service condition.
NOTE: This issue was previously covered in BID 40651 (Google Chrome prior to 5.0.375.70 Multiple Security Vulnerabilities), but has been assigned its own record to better document it.
WebKit is prone to a remote memory-corruption vulnerability.
Successful exploits may allow the attacker to execute arbitrary code in the context of the application. Failed exploit attempts will result in a denial-of-service condition.
NOTE: This issue was previously covered in BID 40651 (Google Chrome prior to 5.0.375.70 Multiple Security Vulnerabilities), but has been assigned its own record to better document it.
Exploit / POC
WebKit Geolocation Events Use After Free Memory Corruption Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
WebKit Geolocation Events Use After Free Memory Corruption Vulnerability
Solution:
Updates are available. Please see the references for more information.
Ubuntu Ubuntu Linux 9.10 powerpc
Ubuntu Ubuntu Linux 9.10 lpia
Ubuntu Ubuntu Linux 10.04 powerpc
Ubuntu Ubuntu Linux 9.10 amd64
Ubuntu Ubuntu Linux 10.10 powerpc
Ubuntu Ubuntu Linux 9.10 sparc
Solution:
Updates are available. Please see the references for more information.
Ubuntu Ubuntu Linux 9.10 powerpc
-
Ubuntu libwebkit-1.0-2-dbg_1.2.5-0ubuntu0.9.10.1_powerpc.deb
http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2-dbg_1.2.5-0 ubuntu0.9.10.1_powerpc.deb -
Ubuntu libwebkit-1.0-2_1.2.5-0ubuntu0.9.10.1_powerpc.deb
http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2_1.2.5-0ubun tu0.9.10.1_powerpc.deb -
Ubuntu libwebkit-1.0-common_1.2.5-0ubuntu0.9.10.1_all.deb
http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-com mon_1.2.5-0ubuntu0.9.10.1_all.deb -
Ubuntu libwebkit-dev_1.2.5-0ubuntu0.9.10.1_powerpc.deb
http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-dev_1.2.5-0ubuntu 0.9.10.1_powerpc.deb
Ubuntu Ubuntu Linux 9.10 lpia
-
Ubuntu libwebkit-1.0-2-dbg_1.2.5-0ubuntu0.9.10.1_lpia.deb
http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2-dbg_1.2.5-0 ubuntu0.9.10.1_lpia.deb -
Ubuntu libwebkit-1.0-2_1.2.5-0ubuntu0.9.10.1_lpia.deb
http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2_1.2.5-0ubun tu0.9.10.1_lpia.deb -
Ubuntu libwebkit-1.0-common_1.2.5-0ubuntu0.9.10.1_all.deb
http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-com mon_1.2.5-0ubuntu0.9.10.1_all.deb -
Ubuntu libwebkit-dev_1.2.5-0ubuntu0.9.10.1_lpia.deb
http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-dev_1.2.5-0ubuntu 0.9.10.1_lpia.deb
Ubuntu Ubuntu Linux 10.04 powerpc
-
Ubuntu gir1.0-webkit-1.0_1.2.5-0ubuntu0.10.04.1_powerpc.deb
http://ports.ubuntu.com/pool/universe/w/webkit/gir1.0-webkit-1.0_1.2.5 -0ubuntu0.10.04.1_powerpc.deb -
Ubuntu libwebkit-1.0-2-dbg_1.2.5-0ubuntu0.10.04.1_powerpc.deb
http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2-dbg_1.2.5-0 ubuntu0.10.04.1_powerpc.deb -
Ubuntu libwebkit-1.0-2_1.2.5-0ubuntu0.10.04.1_powerpc.deb
http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2_1.2.5-0ubun tu0.10.04.1_powerpc.deb -
Ubuntu libwebkit-1.0-common_1.2.5-0ubuntu0.10.04.1_all.deb
http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-com mon_1.2.5-0ubuntu0.10.04.1_all.deb -
Ubuntu libwebkit-dev_1.2.5-0ubuntu0.10.04.1_powerpc.deb
http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-dev_1.2.5-0ubuntu 0.10.04.1_powerpc.deb
Ubuntu Ubuntu Linux 9.10 amd64
-
Ubuntu libwebkit-1.0-2-dbg_1.2.5-0ubuntu0.9.10.1_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-2-d bg_1.2.5-0ubuntu0.9.10.1_amd64.deb -
Ubuntu libwebkit-1.0-2_1.2.5-0ubuntu0.9.10.1_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-2_1 .2.5-0ubuntu0.9.10.1_amd64.deb -
Ubuntu libwebkit-1.0-common_1.2.5-0ubuntu0.9.10.1_all.deb
http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-com mon_1.2.5-0ubuntu0.9.10.1_all.deb -
Ubuntu libwebkit-dev_1.2.5-0ubuntu0.9.10.1_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-dev_1.2 .5-0ubuntu0.9.10.1_amd64.deb
Ubuntu Ubuntu Linux 10.10 powerpc
-
Ubuntu gir1.0-webkit-1.0_1.2.5-0ubuntu0.10.10.1_powerpc.deb
http://ports.ubuntu.com/pool/universe/w/webkit/gir1.0-webkit-1.0_1.2.5 -0ubuntu0.10.10.1_powerpc.deb -
Ubuntu libwebkit-1.0-2-dbg_1.2.5-0ubuntu0.10.10.1_powerpc.deb
http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2-dbg_1.2.5-0 ubuntu0.10.10.1_powerpc.deb -
Ubuntu libwebkit-1.0-2_1.2.5-0ubuntu0.10.10.1_powerpc.deb
http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2_1.2.5-0ubun tu0.10.10.1_powerpc.deb -
Ubuntu libwebkit-1.0-common_1.2.5-0ubuntu0.10.10.1_all.deb
http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-com mon_1.2.5-0ubuntu0.10.10.1_all.deb -
Ubuntu libwebkit-dev_1.2.5-0ubuntu0.10.10.1_powerpc.deb
http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-dev_1.2.5-0ubuntu 0.10.10.1_powerpc.deb
Ubuntu Ubuntu Linux 9.10 sparc
-
Ubuntu libwebkit-1.0-2-dbg_1.2.5-0ubuntu0.9.10.1_sparc.deb
http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2-dbg_1.2.5-0 ubuntu0.9.10.1_sparc.deb -
Ubuntu libwebkit-1.0-2_1.2.5-0ubuntu0.9.10.1_sparc.deb
http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2_1.2.5-0ubun tu0.9.10.1_sparc.deb -
Ubuntu libwebkit-1.0-common_1.2.5-0ubuntu0.9.10.1_all.deb
http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-com mon_1.2.5-0ubuntu0.9.10.1_all.deb -
Ubuntu libwebkit-dev_1.2.5-0ubuntu0.9.10.1_sparc.deb
http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-dev_1.2.5-0ubuntu 0.9.10.1_sparc.deb
References
WebKit Geolocation Events Use After Free Memory Corruption Vulnerability
References:
References:
- Bug 596498 - (CVE-2010-1772) CVE-2010-1772 WebKit: use-after-free vulnerability (Red Hat)
- Changeset 59859 (WebKit Open Source Project)
- Google Chrome 5.0.375.70 has been released to the Stable channel on Linux, Mac, (Google)
- Google Chrome Homepage (Google)
- webkit 1.2.5 security update tracking bug (Ubuntu)
- Webkit Homepage (WebKit)