WebKit 'WebCore::toAlphabetic()' Memory Corruption Vulnerability
BID:41575
Info
WebKit 'WebCore::toAlphabetic()' Memory Corruption Vulnerability
| Bugtraq ID: | 41575 |
| Class: | Unknown |
| CVE: |
CVE-2010-1773 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 08 2010 12:00AM |
| Updated: | Apr 13 2015 09:56PM |
| Credit: | Drew Yao of Apple Product Security |
| Vulnerable: |
WebKit Open Source Project WebKit 1.2.3 WebKit Open Source Project WebKit 1.2.2 WebKit Open Source Project WebKit 1.2.2-1 WebKit Open Source Project WebKit 0 Ubuntu Ubuntu Linux 9.10 sparc Ubuntu Ubuntu Linux 9.10 powerpc Ubuntu Ubuntu Linux 9.10 lpia Ubuntu Ubuntu Linux 9.10 i386 Ubuntu Ubuntu Linux 9.10 amd64 Ubuntu Ubuntu Linux 10.10 powerpc Ubuntu Ubuntu Linux 10.10 i386 Ubuntu Ubuntu Linux 10.10 amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 amd64 Trolltech Qt 4.6.2 Trolltech Qt 4.6.1 Trolltech Qt 4.6 S.u.S.E. openSUSE 11.3 Mandriva Linux Mandrake 2010.1 x86_64 Mandriva Linux Mandrake 2010.1 Google Chrome 5.0.375 .55 |
| Not Vulnerable: |
WebKit Open Source Project WebKit 1.2.5 Trolltech Qt 4.6.3 Google Chrome 5.0.375 .70 |
Discussion
WebKit 'WebCore::toAlphabetic()' Memory Corruption Vulnerability
WebKit is prone to a remote memory-corruption vulnerability.
Successful exploits may allow the attacker to execute arbitrary code in the context of the application. Failed exploit attempts will result in a denial-of-service condition.
NOTE: This issue was previously covered in BID 40651 (Google Chrome prior to 5.0.375.70 Multiple Security Vulnerabilities), but has been assigned its own record to better document it.
WebKit is prone to a remote memory-corruption vulnerability.
Successful exploits may allow the attacker to execute arbitrary code in the context of the application. Failed exploit attempts will result in a denial-of-service condition.
NOTE: This issue was previously covered in BID 40651 (Google Chrome prior to 5.0.375.70 Multiple Security Vulnerabilities), but has been assigned its own record to better document it.
Exploit / POC
WebKit 'WebCore::toAlphabetic()' Memory Corruption Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
WebKit 'WebCore::toAlphabetic()' Memory Corruption Vulnerability
References:
References:
- Bug 596500 - (CVE-2010-1773) CVE-2010-1773 WebKit: off-by-one memory read out o (Red Hat)
- Changeset 59950 (WebKit Open Source Project)
- Google Chrome 5.0.375.70 has been released to the Stable channel on Linux, Mac, (Google)
- Google Chrome Homepage (Google)
- Issue 44955: Need to merge WebCore::toAlphabetic() crash to 375 branch. (Google)
- webkit 1.2.5 security update tracking bug (Ubuntu)
- Webkit Homepage (WebKit)