WebKit CVE-2010-1386 Information Disclosure Vulnerability

Bugtraq ID:	42500
Class:	Design Error
CVE:	cve-2010-1386
Remote:	Yes
Local:	No
Published:	Jul 12 2010 12:00AM
Updated:	Mar 02 2011 03:18PM
Credit:	Reported by the vendor
Vulnerable:	WebKit Open Source Project WebKit 1.2.3 WebKit Open Source Project WebKit 1.2.2 WebKit Open Source Project WebKit 1.2.2-1 WebKit Open Source Project WebKit 0 Ubuntu Ubuntu Linux 9.10 sparc Ubuntu Ubuntu Linux 9.10 powerpc Ubuntu Ubuntu Linux 9.10 lpia Ubuntu Ubuntu Linux 9.10 i386 Ubuntu Ubuntu Linux 9.10 amd64 Ubuntu Ubuntu Linux 10.10 powerpc Ubuntu Ubuntu Linux 10.10 i386 Ubuntu Ubuntu Linux 10.10 amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 amd64 MandrakeSoft Linux Mandrake 2010.1 x86_64 MandrakeSoft Linux Mandrake 2010.1
Not Vulnerable:	WebKit Open Source Project WebKit 1.2.5 WebKit Open Source Project WebKit 1.2.2-1

WebKit CVE-2010-1386 Information Disclosure Vulnerability

WebKit is prone to an information-disclosure vulnerability.

A remote attacker can exploit this issue to obtain sensitive information that may aid in further attacks.

Versions prior to WebKit 1.2.2-1 (AMD 64) are vulnerable; other versions may also be affected.

WebKit CVE-2010-1386 Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references for more information.


Ubuntu Ubuntu Linux 9.10 sparc

• Ubuntu libwebkit-1.0-2-dbg_1.2.5-0ubuntu0.9.10.1_sparc.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2-dbg_1.2.5-0 ubuntu0.9.10.1_sparc.deb


• Ubuntu libwebkit-dev_1.2.5-0ubuntu0.9.10.1_sparc.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-dev_1.2.5-0ubuntu 0.9.10.1_sparc.deb


• Ubuntu libwebkit-1.0-common_1.2.5-0ubuntu0.9.10.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-com mon_1.2.5-0ubuntu0.9.10.1_all.deb


• Ubuntu libwebkit-1.0-2_1.2.5-0ubuntu0.9.10.1_sparc.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2_1.2.5-0ubun tu0.9.10.1_sparc.deb

Ubuntu Ubuntu Linux 10.10 amd64

• Ubuntu gir1.0-webkit-1.0_1.2.5-0ubuntu0.10.10.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/w/webkit/gir1.0-webkit -1.0_1.2.5-0ubuntu0.10.10.1_amd64.deb


• Ubuntu libwebkit-1.0-2-dbg_1.2.5-0ubuntu0.10.10.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-2-d bg_1.2.5-0ubuntu0.10.10.1_amd64.deb


• Ubuntu libwebkit-1.0-2_1.2.5-0ubuntu0.10.10.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-2_1 .2.5-0ubuntu0.10.10.1_amd64.deb


• Ubuntu libwebkit-dev_1.2.5-0ubuntu0.10.10.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-dev_1.2 .5-0ubuntu0.10.10.1_amd64.deb


• Ubuntu libwebkit-1.0-common_1.2.5-0ubuntu0.10.10.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-com mon_1.2.5-0ubuntu0.10.10.1_all.deb

Ubuntu Ubuntu Linux 10.04 powerpc

• Ubuntu libwebkit-1.0-common_1.2.5-0ubuntu0.10.04.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-com mon_1.2.5-0ubuntu0.10.04.1_all.deb


• Ubuntu gir1.0-webkit-1.0_1.2.5-0ubuntu0.10.04.1_powerpc.deb
  http://ports.ubuntu.com/pool/universe/w/webkit/gir1.0-webkit-1.0_1.2.5 -0ubuntu0.10.04.1_powerpc.deb


• Ubuntu libwebkit-1.0-2_1.2.5-0ubuntu0.10.04.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2_1.2.5-0ubun tu0.10.04.1_powerpc.deb


• Ubuntu libwebkit-dev_1.2.5-0ubuntu0.10.04.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-dev_1.2.5-0ubuntu 0.10.04.1_powerpc.deb


• Ubuntu libwebkit-1.0-2-dbg_1.2.5-0ubuntu0.10.04.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2-dbg_1.2.5-0 ubuntu0.10.04.1_powerpc.deb

MandrakeSoft Linux Mandrake 2010.1

• Mandriva webkit1.0-webinspector-1.2.7-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva webkit-jsc-1.2.7-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libwebkitgtk1.0-devel-1.2.7-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva webkit-1.2.7-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva webkit1.0-1.2.7-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libwebkitgtk1.0_2-1.2.7-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva webkit-gtklauncher-1.2.7-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 9.10 i386

• Ubuntu libwebkit-dev_1.2.5-0ubuntu0.9.10.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-dev_1.2 .5-0ubuntu0.9.10.1_i386.deb


• Ubuntu libwebkit-1.0-2_1.2.5-0ubuntu0.9.10.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-2_1 .2.5-0ubuntu0.9.10.1_i386.deb


• Ubuntu libwebkit-1.0-2-dbg_1.2.5-0ubuntu0.9.10.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-2-d bg_1.2.5-0ubuntu0.9.10.1_i386.deb


• Ubuntu libwebkit-1.0-common_1.2.5-0ubuntu0.9.10.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-com mon_1.2.5-0ubuntu0.9.10.1_all.deb

Ubuntu Ubuntu Linux 10.04 amd64

• Ubuntu gir1.0-webkit-1.0_1.2.5-0ubuntu0.10.04.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/w/webkit/gir1.0-webkit -1.0_1.2.5-0ubuntu0.10.04.1_amd64.deb


• Ubuntu libwebkit-dev_1.2.5-0ubuntu0.10.04.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-dev_1.2 .5-0ubuntu0.10.04.1_amd64.deb


• Ubuntu libwebkit-1.0-2-dbg_1.2.5-0ubuntu0.10.04.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-2-d bg_1.2.5-0ubuntu0.10.04.1_amd64.deb


• Ubuntu libwebkit-1.0-2_1.2.5-0ubuntu0.10.04.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-2_1 .2.5-0ubuntu0.10.04.1_amd64.deb


• Ubuntu libwebkit-1.0-common_1.2.5-0ubuntu0.10.04.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-com mon_1.2.5-0ubuntu0.10.04.1_all.deb

Ubuntu Ubuntu Linux 10.10 powerpc

• Ubuntu gir1.0-webkit-1.0_1.2.5-0ubuntu0.10.10.1_powerpc.deb
  http://ports.ubuntu.com/pool/universe/w/webkit/gir1.0-webkit-1.0_1.2.5 -0ubuntu0.10.10.1_powerpc.deb


• Ubuntu libwebkit-dev_1.2.5-0ubuntu0.10.10.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-dev_1.2.5-0ubuntu 0.10.10.1_powerpc.deb


• Ubuntu libwebkit-1.0-2-dbg_1.2.5-0ubuntu0.10.10.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2-dbg_1.2.5-0 ubuntu0.10.10.1_powerpc.deb


• Ubuntu libwebkit-1.0-2_1.2.5-0ubuntu0.10.10.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2_1.2.5-0ubun tu0.10.10.1_powerpc.deb


• Ubuntu libwebkit-1.0-common_1.2.5-0ubuntu0.10.10.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-com mon_1.2.5-0ubuntu0.10.10.1_all.deb

Ubuntu Ubuntu Linux 9.10 powerpc

• Ubuntu libwebkit-1.0-2-dbg_1.2.5-0ubuntu0.9.10.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2-dbg_1.2.5-0 ubuntu0.9.10.1_powerpc.deb


• Ubuntu libwebkit-1.0-2_1.2.5-0ubuntu0.9.10.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2_1.2.5-0ubun tu0.9.10.1_powerpc.deb


• Ubuntu libwebkit-dev_1.2.5-0ubuntu0.9.10.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-dev_1.2.5-0ubuntu 0.9.10.1_powerpc.deb


• Ubuntu libwebkit-1.0-common_1.2.5-0ubuntu0.9.10.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-com mon_1.2.5-0ubuntu0.9.10.1_all.deb

Ubuntu Ubuntu Linux 9.10 amd64

• Ubuntu libwebkit-1.0-2-dbg_1.2.5-0ubuntu0.9.10.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-2-d bg_1.2.5-0ubuntu0.9.10.1_amd64.deb


• Ubuntu libwebkit-dev_1.2.5-0ubuntu0.9.10.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-dev_1.2 .5-0ubuntu0.9.10.1_amd64.deb


• Ubuntu libwebkit-1.0-common_1.2.5-0ubuntu0.9.10.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-com mon_1.2.5-0ubuntu0.9.10.1_all.deb


• Ubuntu libwebkit-1.0-2_1.2.5-0ubuntu0.9.10.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-2_1 .2.5-0ubuntu0.9.10.1_amd64.deb

Ubuntu Ubuntu Linux 10.10 i386

• Ubuntu libwebkit-1.0-2-dbg_1.2.5-0ubuntu0.10.10.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-2-d bg_1.2.5-0ubuntu0.10.10.1_i386.deb


• Ubuntu libwebkit-dev_1.2.5-0ubuntu0.10.10.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-dev_1.2 .5-0ubuntu0.10.10.1_i386.deb


• Ubuntu gir1.0-webkit-1.0_1.2.5-0ubuntu0.10.10.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/w/webkit/gir1.0-webkit -1.0_1.2.5-0ubuntu0.10.10.1_i386.deb


• Ubuntu libwebkit-1.0-2_1.2.5-0ubuntu0.10.10.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-2_1 .2.5-0ubuntu0.10.10.1_i386.deb


• Ubuntu libwebkit-1.0-common_1.2.5-0ubuntu0.10.10.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-com mon_1.2.5-0ubuntu0.10.10.1_all.deb

Ubuntu Ubuntu Linux 9.10 lpia

• Ubuntu libwebkit-1.0-common_1.2.5-0ubuntu0.9.10.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-com mon_1.2.5-0ubuntu0.9.10.1_all.deb


• Ubuntu libwebkit-dev_1.2.5-0ubuntu0.9.10.1_lpia.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-dev_1.2.5-0ubuntu 0.9.10.1_lpia.deb


• Ubuntu libwebkit-1.0-2-dbg_1.2.5-0ubuntu0.9.10.1_lpia.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2-dbg_1.2.5-0 ubuntu0.9.10.1_lpia.deb


• Ubuntu libwebkit-1.0-2_1.2.5-0ubuntu0.9.10.1_lpia.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2_1.2.5-0ubun tu0.9.10.1_lpia.deb

MandrakeSoft Linux Mandrake 2010.1 x86_64

• Mandriva lib64webkitgtk1.0-devel-1.2.7-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva webkit-jsc-1.2.7-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva webkit-gtklauncher-1.2.7-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva webkit1.0-1.2.7-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64webkitgtk1.0_2-1.2.7-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva webkit-1.2.7-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva webkit1.0-webinspector-1.2.7-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 10.04 sparc

• Ubuntu libwebkit-1.0-common_1.2.5-0ubuntu0.10.04.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-com mon_1.2.5-0ubuntu0.10.04.1_all.deb


• Ubuntu libwebkit-1.0-2_1.2.5-0ubuntu0.10.04.1_sparc.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2_1.2.5-0ubun tu0.10.04.1_sparc.deb


• Ubuntu gir1.0-webkit-1.0_1.2.5-0ubuntu0.10.04.1_sparc.deb
  http://ports.ubuntu.com/pool/universe/w/webkit/gir1.0-webkit-1.0_1.2.5 -0ubuntu0.10.04.1_sparc.deb


• Ubuntu libwebkit-dev_1.2.5-0ubuntu0.10.04.1_sparc.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-dev_1.2.5-0ubuntu 0.10.04.1_sparc.deb


• Ubuntu libwebkit-1.0-2-dbg_1.2.5-0ubuntu0.10.04.1_sparc.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2-dbg_1.2.5-0 ubuntu0.10.04.1_sparc.deb

Ubuntu Ubuntu Linux 10.04 i386

• Ubuntu libwebkit-1.0-common_1.2.5-0ubuntu0.10.04.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-com mon_1.2.5-0ubuntu0.10.04.1_all.deb


• Ubuntu libwebkit-1.0-2-dbg_1.2.5-0ubuntu0.10.04.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-2-d bg_1.2.5-0ubuntu0.10.04.1_i386.deb


• Ubuntu libwebkit-dev_1.2.5-0ubuntu0.10.04.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-dev_1.2 .5-0ubuntu0.10.04.1_i386.deb


• Ubuntu gir1.0-webkit-1.0_1.2.5-0ubuntu0.10.04.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/w/webkit/gir1.0-webkit -1.0_1.2.5-0ubuntu0.10.04.1_i386.deb


• Ubuntu libwebkit-1.0-2_1.2.5-0ubuntu0.10.04.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-2_1 .2.5-0ubuntu0.10.04.1_i386.deb

WebKit CVE-2010-1386 Information Disclosure Vulnerability

References:

• Accepted webkit 1.2.2-1 (source all amd64) (WebKit)
  
• Bug#586547: marked as done (webkit: CVE-2010-2304 memory corruption in rendering (Gustavo Noronha Silva)
  
• webkit 1.2.5 security update tracking bug (Ubuntu)
  
• Webkit Homepage (Webkit)