WebKit JavaScript Array Signedness Error Remote Code Execution Vulnerability
BID:42045
Info
WebKit JavaScript Array Signedness Error Remote Code Execution Vulnerability
| Bugtraq ID: | 42045 |
| Class: | Unknown |
| CVE: |
CVE-2010-1791 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 28 2010 12:00AM |
| Updated: | Mar 19 2015 09:28AM |
| Credit: | Natalie Silvanovich |
| Vulnerable: |
WebKit Open Source Project WebKit r52833 WebKit Open Source Project WebKit r52401 WebKit Open Source Project WebKit r51295 WebKit Open Source Project WebKit r38566 WebKit Open Source Project WebKit 0 Mandriva Linux Mandrake 2010.1 x86_64 Mandriva Linux Mandrake 2010.1 Gentoo Linux Apple Safari 4.0.5 for Windows Apple Safari 4.0.5 Apple Safari 4.0.4 for Windows Apple Safari 4.0.4 Apple Safari 4.0.3 for Windows Apple Safari 4.0.3 Apple Safari 4.0.2 for Windows Apple Safari 4.0.2 Apple Safari 4.0.1 Apple Safari 5.0 for Windows Apple Safari 5.0 Apple Safari 4.1 Apple Safari 4 for Windows Apple Safari 4 Beta Apple Safari 4 Apple iTunes 9.0.2 Apple iTunes 9.0.1 .8 Apple iTunes 9.0.1 Apple iTunes 9.0 Apple iTunes 9.2 Apple iTunes 9.1 Apple iPod Touch 3.1.3 Apple iPod Touch 3.1.2 Apple iPod Touch 3.1.1 Apple iPod Touch 2.2.1 Apple iPod Touch 2.0.2 Apple iPod Touch 2.0.1 Apple iPod Touch 3.0 Apple iPod Touch 2.2 Apple iPod Touch 2.1 Apple iPod Touch 2.0 Apple iPhone 4.0.1 Apple iPhone 3.2.1 Apple iPhone 3.1.3 Apple iPhone 3.1.2 Apple iPhone 3.0.1 Apple iPhone 2.2.1 Apple iPhone 2.0.2 Apple iPhone 2.0.1 Apple iPhone 4.0 Apple iPhone 3.2 Apple iPhone 3.1 Apple iPhone 3.0 Apple iPhone 2.2 Apple iPhone 2.1 Apple iPhone 2.0 Apple iPad 3.2.1 Apple iPad 3.2.2 Apple iPad 3.2 Apple iPad 0 Apple iOS 4.0.2 Apple iOS 4.0.1 Apple iOS 3.2.2 Apple iOS 3.2.1 Apple iOS 4.2 beta Apple iOS 4.1 Apple iOS 4 Apple iOS 3.2 Apple iOS 2.0 |
| Not Vulnerable: |
Apple Safari 5.0.1 Apple Safari 4.1.1 Apple iTunes 10 Apple iOS 4.2 Apple iOS 4.1 |
Discussion
WebKit JavaScript Array Signedness Error Remote Code Execution Vulnerability
WebKit is prone to a remote code-execution vulnerability.
An attacker can exploit this issue by enticing an unsuspecting user into viewing a web page containing malicious content. A successful exploit will result in the execution of arbitrary code in the context of the user running the affected application.
This issue has been addressed in Apple Safari 5.0.1 and 4.1.1.
NOTE: This issue was previously covered in BID 42020 (Apple Safari Prior to 5.0.1 and 4.1.1 Multiple Security Vulnerabilities) but has been given its own record to better document it.
WebKit is prone to a remote code-execution vulnerability.
An attacker can exploit this issue by enticing an unsuspecting user into viewing a web page containing malicious content. A successful exploit will result in the execution of arbitrary code in the context of the user running the affected application.
This issue has been addressed in Apple Safari 5.0.1 and 4.1.1.
NOTE: This issue was previously covered in BID 42020 (Apple Safari Prior to 5.0.1 and 4.1.1 Multiple Security Vulnerabilities) but has been given its own record to better document it.
Exploit / POC
WebKit JavaScript Array Signedness Error Remote Code Execution Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
WebKit JavaScript Array Signedness Error Remote Code Execution Vulnerability
Solution:
Updates are available. Please see the references for more information.
Mandriva Linux Mandrake 2010.1 x86_64
Apple iTunes 9.2
Apple Safari 5.0 for Windows
Apple iTunes 9.1
Apple Safari 5.0
Mandriva Linux Mandrake 2010.1
Apple Safari 4.1
Apple iTunes 9.0
Apple iTunes 9.0.1
Apple iTunes 9.0.1 .8
Apple iTunes 9.0.2
Solution:
Updates are available. Please see the references for more information.
Mandriva Linux Mandrake 2010.1 x86_64
-
Mandriva lib64webkitgtk1.0-devel-1.2.7-0.1mdv2010.2.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva lib64webkitgtk1.0_2-1.2.7-0.1mdv2010.2.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva webkit-1.2.7-0.1mdv2010.2.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva webkit-gtklauncher-1.2.7-0.1mdv2010.2.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva webkit-jsc-1.2.7-0.1mdv2010.2.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva webkit1.0-1.2.7-0.1mdv2010.2.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva webkit1.0-webinspector-1.2.7-0.1mdv2010.2.x86_64.rpm
http://www.mandriva.com/en/download/
Apple iTunes 9.2
-
Apple iTunes10-iTunes64Setup.exe
http://www.apple.com/itunes/download/ -
Apple iTunes10-iTunesSetup.exe
http://www.apple.com/itunes/download/ -
Apple iTunes10.dmg
os x
http://www.apple.com/itunes/download/
Apple Safari 5.0 for Windows
-
Apple APPLE-SA-2010-07-28-1
Safari for Windows 7, Vista or XP
http://www.apple.com/safari/download/ -
Apple APPLE-SA-2010-07-28-1 Safari_Setup.exe
Safari for Windows 7, Vista or XP from the Microsoft Choice Screen
http://www.apple.com/safari/download/ -
Apple APPLE-SA-2010-07-28-1 SafariQuickTimeSetup.exe
Safari+QuickTime for Windows 7, Vista or XP
http://www.apple.com/safari/download/
Apple iTunes 9.1
-
Apple iTunes10-iTunes64Setup.exe
http://www.apple.com/itunes/download/ -
Apple iTunes10-iTunesSetup.exe
http://www.apple.com/itunes/download/ -
Apple iTunes10.dmg
os x
http://www.apple.com/itunes/download/
Apple Safari 5.0
-
Apple Safari5.0.1Leopard.dmg
Safari for Mac OS X v10.5.8
http://www.apple.com/safari/download/ -
Apple Safari5.0.1SnowLeopard.dmg
Safari for Mac OS X v10.6.2 and later
http://www.apple.com/safari/download/
Mandriva Linux Mandrake 2010.1
-
Mandriva libwebkitgtk1.0-devel-1.2.7-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/download/ -
Mandriva libwebkitgtk1.0_2-1.2.7-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/download/ -
Mandriva webkit-1.2.7-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/download/ -
Mandriva webkit-gtklauncher-1.2.7-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/download/ -
Mandriva webkit-jsc-1.2.7-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/download/ -
Mandriva webkit1.0-1.2.7-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/download/ -
Mandriva webkit1.0-webinspector-1.2.7-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/download/
Apple Safari 4.1
-
Apple APPLE-SA-2010-07-28-1
Safari for Windows 7, Vista or XP
http://www.apple.com/safari/download/ -
Apple APPLE-SA-2010-07-28-1 Safari_Setup.exe
Safari for Windows 7, Vista or XP from the Microsoft Choice Screen
http://www.apple.com/safari/download/ -
Apple APPLE-SA-2010-07-28-1 SafariQuickTimeSetup.exe
Safari+QuickTime for Windows 7, Vista or XP
http://www.apple.com/safari/download/ -
Apple Safari4.1.1Tiger.dmg
Safari for Mac OS X v10.4.11
http://www.apple.com/safari/download/
Apple iTunes 9.0
-
Apple iTunes10-iTunes64Setup.exe
http://www.apple.com/itunes/download/ -
Apple iTunes10-iTunesSetup.exe
http://www.apple.com/itunes/download/ -
Apple iTunes10.dmg
os x
http://www.apple.com/itunes/download/
Apple iTunes 9.0.1
-
Apple iTunes10-iTunes64Setup.exe
http://www.apple.com/itunes/download/ -
Apple iTunes10-iTunesSetup.exe
http://www.apple.com/itunes/download/ -
Apple iTunes10.dmg
os x
http://www.apple.com/itunes/download/
Apple iTunes 9.0.1 .8
-
Apple iTunes10-iTunes64Setup.exe
http://www.apple.com/itunes/download/ -
Apple iTunes10-iTunesSetup.exe
http://www.apple.com/itunes/download/ -
Apple iTunes10.dmg
os x
http://www.apple.com/itunes/download/
Apple iTunes 9.0.2
-
Apple iTunes10-iTunes64Setup.exe
http://www.apple.com/itunes/download/ -
Apple iTunes10-iTunesSetup.exe
http://www.apple.com/itunes/download/ -
Apple iTunes10.dmg
os x
http://www.apple.com/itunes/download/
References
WebKit JavaScript Array Signedness Error Remote Code Execution Vulnerability
References:
References:
- Apple Safari Homepage (Apple)