Webkit Floating Point Datatype Remote Code Execution Vulnerability

Bugtraq ID:	43047
Class:	Input Validation Error
CVE:	CVE-2010-1807
Remote:	Yes
Local:	No
Published:	Sep 07 2010 12:00AM
Updated:	May 07 2015 05:13PM
Credit:	Luke Wagner of Mozilla
Vulnerable:	WebKit Open Source Project WebKit 1.2.3 WebKit Open Source Project WebKit 1.2.2 WebKit Open Source Project WebKit 1.2.2-1 WebKit Open Source Project WebKit 0 Ubuntu Ubuntu Linux 9.10 sparc Ubuntu Ubuntu Linux 9.10 powerpc Ubuntu Ubuntu Linux 9.10 lpia Ubuntu Ubuntu Linux 9.10 i386 Ubuntu Ubuntu Linux 9.10 amd64 Ubuntu Ubuntu Linux 10.10 powerpc Ubuntu Ubuntu Linux 10.10 i386 Ubuntu Ubuntu Linux 10.10 amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 amd64 S.u.S.E. openSUSE 11.3 S.u.S.E. openSUSE 11.2 Redhat Enterprise Linux Workstation Optional 6 Redhat Enterprise Linux Workstation 6 Redhat Enterprise Linux Server Optional 6 Redhat Enterprise Linux Server 6 Redhat Enterprise Linux HPC Node Optional 6 Redhat Enterprise Linux Desktop Optional 6 Redhat Enterprise Linux Desktop 6 Open Handset Alliance Android 2.0.1 Open Handset Alliance Android 2.1 Mandriva Linux Mandrake 2010.1 x86_64 Mandriva Linux Mandrake 2010.1 Gentoo Linux Apple Safari 4.0.5 for Windows Apple Safari 4.0.5 Apple Safari 4.0.4 for Windows Apple Safari 4.0.4 Apple Safari 4.0.3 for Windows Apple Safari 4.0.3 Apple Safari 4.0.2 for Windows Apple Safari 4.0.2 Apple Safari 4.0.1 Apple Safari 5.0.1 for Windows Apple Safari 5.0.1 Apple Safari 5.0 for Windows Apple Safari 5.0 Apple Safari 4.1.1 Apple Safari 4.1 Apple Safari 4 for Windows Apple Safari 4 Beta Apple Safari 4 Apple iPod Touch 3.1.3 Apple iPod Touch 3.1.2 Apple iPod Touch 3.1.1 Apple iPod Touch 2.2.1 Apple iPod Touch 3.0 Apple iPod Touch 2.2 Apple iPod Touch 2.1 Apple iPhone 4.0.1 Apple iPhone 3.2.1 Apple iPhone 3.1.3 Apple iPhone 3.1.2 Apple iPhone 3.0.1 Apple iPhone 2.2.1 Apple iPhone 2.0.2 Apple iPhone 2.0.1 Apple iPhone 4.1 Apple iPhone 4.0 Apple iPhone 3.2 Apple iPhone 3.1 Apple iPhone 3.0 Apple iPhone 2.2 Apple iPhone 2.1 Apple iPhone 2.0 Apple iPad 3.2.1 Apple iPad 3.2.2 Apple iPad 3.2 Apple iPad 0 Apple iOS 4.0.2 Apple iOS 4.0.1 Apple iOS 3.2.2 Apple iOS 3.2.1 Apple iOS 4.2 beta Apple iOS 4.1 Apple iOS 4 Apple iOS 3.2
Not Vulnerable:	WebKit Open Source Project WebKit 1.2.5 Open Handset Alliance Android 2.2 Apple Safari 4.1.2 for Windows Apple Safari 5.0.2 for Windows Apple Safari 5.0.2 Apple Safari 4.1.2 Apple iOS 4.2

Webkit Floating Point Datatype Remote Code Execution Vulnerability

WebKit is prone to a remote code-execution vulnerability.

Successful exploits will allow an attacker to run arbitrary code in the context of the user running the application. Failed attacks will cause denial-of-service conditions.

Versions prior to Safari 5.0.2 and Safari 4.1.2 are vulnerable.

Webkit Floating Point Datatype Remote Code Execution Vulnerability

The following exploits are available for the Android platform:

• /data/vulnerabilities/exploits/43047-2.txt
• /data/vulnerabilities/exploits/43047.html

Webkit Floating Point Datatype Remote Code Execution Vulnerability

Solution:
Updates are available. Please see the references for more information.


Ubuntu Ubuntu Linux 9.10 sparc

• Ubuntu libwebkit-1.0-2-dbg_1.2.5-0ubuntu0.9.10.1_sparc.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2-dbg_1.2.5-0 ubuntu0.9.10.1_sparc.deb


• Ubuntu libwebkit-1.0-2_1.2.5-0ubuntu0.9.10.1_sparc.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2_1.2.5-0ubun tu0.9.10.1_sparc.deb


• Ubuntu libwebkit-1.0-common_1.2.5-0ubuntu0.9.10.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-com mon_1.2.5-0ubuntu0.9.10.1_all.deb


• Ubuntu libwebkit-dev_1.2.5-0ubuntu0.9.10.1_sparc.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-dev_1.2.5-0ubuntu 0.9.10.1_sparc.deb

Ubuntu Ubuntu Linux 9.10 powerpc

• Ubuntu libwebkit-1.0-2-dbg_1.2.5-0ubuntu0.9.10.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2-dbg_1.2.5-0 ubuntu0.9.10.1_powerpc.deb


• Ubuntu libwebkit-1.0-2_1.2.5-0ubuntu0.9.10.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2_1.2.5-0ubun tu0.9.10.1_powerpc.deb


• Ubuntu libwebkit-1.0-common_1.2.5-0ubuntu0.9.10.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-com mon_1.2.5-0ubuntu0.9.10.1_all.deb


• Ubuntu libwebkit-dev_1.2.5-0ubuntu0.9.10.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-dev_1.2.5-0ubuntu 0.9.10.1_powerpc.deb

Ubuntu Ubuntu Linux 9.10 lpia

• Ubuntu libwebkit-1.0-2-dbg_1.2.5-0ubuntu0.9.10.1_lpia.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2-dbg_1.2.5-0 ubuntu0.9.10.1_lpia.deb


• Ubuntu libwebkit-1.0-2_1.2.5-0ubuntu0.9.10.1_lpia.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2_1.2.5-0ubun tu0.9.10.1_lpia.deb


• Ubuntu libwebkit-1.0-common_1.2.5-0ubuntu0.9.10.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-com mon_1.2.5-0ubuntu0.9.10.1_all.deb


• Ubuntu libwebkit-dev_1.2.5-0ubuntu0.9.10.1_lpia.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-dev_1.2.5-0ubuntu 0.9.10.1_lpia.deb

Mandriva Linux Mandrake 2010.1 x86_64

• Mandriva lib64webkitgtk1.0-devel-1.2.7-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64webkitgtk1.0_2-1.2.7-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva webkit-1.2.7-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva webkit-gtklauncher-1.2.7-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva webkit-jsc-1.2.7-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva webkit1.0-1.2.7-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva webkit1.0-webinspector-1.2.7-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 10.10 amd64

• Ubuntu gir1.0-webkit-1.0_1.2.5-0ubuntu0.10.10.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/w/webkit/gir1.0-webkit -1.0_1.2.5-0ubuntu0.10.10.1_amd64.deb


• Ubuntu libwebkit-1.0-2-dbg_1.2.5-0ubuntu0.10.10.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-2-d bg_1.2.5-0ubuntu0.10.10.1_amd64.deb


• Ubuntu libwebkit-1.0-2_1.2.5-0ubuntu0.10.10.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-2_1 .2.5-0ubuntu0.10.10.1_amd64.deb


• Ubuntu libwebkit-1.0-common_1.2.5-0ubuntu0.10.10.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-com mon_1.2.5-0ubuntu0.10.10.1_all.deb


• Ubuntu libwebkit-dev_1.2.5-0ubuntu0.10.10.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-dev_1.2 .5-0ubuntu0.10.10.1_amd64.deb

Ubuntu Ubuntu Linux 10.04 powerpc

• Ubuntu gir1.0-webkit-1.0_1.2.5-0ubuntu0.10.04.1_powerpc.deb
  http://ports.ubuntu.com/pool/universe/w/webkit/gir1.0-webkit-1.0_1.2.5 -0ubuntu0.10.04.1_powerpc.deb


• Ubuntu libwebkit-1.0-2-dbg_1.2.5-0ubuntu0.10.04.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2-dbg_1.2.5-0 ubuntu0.10.04.1_powerpc.deb


• Ubuntu libwebkit-1.0-2_1.2.5-0ubuntu0.10.04.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2_1.2.5-0ubun tu0.10.04.1_powerpc.deb


• Ubuntu libwebkit-1.0-common_1.2.5-0ubuntu0.10.04.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-com mon_1.2.5-0ubuntu0.10.04.1_all.deb


• Ubuntu libwebkit-dev_1.2.5-0ubuntu0.10.04.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-dev_1.2.5-0ubuntu 0.10.04.1_powerpc.deb

Ubuntu Ubuntu Linux 9.10 i386

• Ubuntu libwebkit-1.0-2-dbg_1.2.5-0ubuntu0.9.10.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-2-d bg_1.2.5-0ubuntu0.9.10.1_i386.deb


• Ubuntu libwebkit-1.0-2_1.2.5-0ubuntu0.9.10.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-2_1 .2.5-0ubuntu0.9.10.1_i386.deb


• Ubuntu libwebkit-1.0-common_1.2.5-0ubuntu0.9.10.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-com mon_1.2.5-0ubuntu0.9.10.1_all.deb


• Ubuntu libwebkit-dev_1.2.5-0ubuntu0.9.10.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-dev_1.2 .5-0ubuntu0.9.10.1_i386.deb

Ubuntu Ubuntu Linux 10.04 amd64

• Ubuntu gir1.0-webkit-1.0_1.2.5-0ubuntu0.10.04.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/w/webkit/gir1.0-webkit -1.0_1.2.5-0ubuntu0.10.04.1_amd64.deb


• Ubuntu libwebkit-1.0-2-dbg_1.2.5-0ubuntu0.10.04.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-2-d bg_1.2.5-0ubuntu0.10.04.1_amd64.deb


• Ubuntu libwebkit-1.0-2_1.2.5-0ubuntu0.10.04.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-2_1 .2.5-0ubuntu0.10.04.1_amd64.deb


• Ubuntu libwebkit-1.0-common_1.2.5-0ubuntu0.10.04.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-com mon_1.2.5-0ubuntu0.10.04.1_all.deb


• Ubuntu libwebkit-dev_1.2.5-0ubuntu0.10.04.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-dev_1.2 .5-0ubuntu0.10.04.1_amd64.deb

Ubuntu Ubuntu Linux 9.10 amd64

• Ubuntu libwebkit-1.0-2-dbg_1.2.5-0ubuntu0.9.10.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-2-d bg_1.2.5-0ubuntu0.9.10.1_amd64.deb


• Ubuntu libwebkit-1.0-2_1.2.5-0ubuntu0.9.10.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-2_1 .2.5-0ubuntu0.9.10.1_amd64.deb


• Ubuntu libwebkit-1.0-common_1.2.5-0ubuntu0.9.10.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-com mon_1.2.5-0ubuntu0.9.10.1_all.deb


• Ubuntu libwebkit-dev_1.2.5-0ubuntu0.9.10.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-dev_1.2 .5-0ubuntu0.9.10.1_amd64.deb

Ubuntu Ubuntu Linux 10.04 i386

• Ubuntu gir1.0-webkit-1.0_1.2.5-0ubuntu0.10.04.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/w/webkit/gir1.0-webkit -1.0_1.2.5-0ubuntu0.10.04.1_i386.deb


• Ubuntu libwebkit-1.0-2-dbg_1.2.5-0ubuntu0.10.04.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-2-d bg_1.2.5-0ubuntu0.10.04.1_i386.deb


• Ubuntu libwebkit-1.0-2_1.2.5-0ubuntu0.10.04.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-2_1 .2.5-0ubuntu0.10.04.1_i386.deb


• Ubuntu libwebkit-1.0-common_1.2.5-0ubuntu0.10.04.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-com mon_1.2.5-0ubuntu0.10.04.1_all.deb


• Ubuntu libwebkit-dev_1.2.5-0ubuntu0.10.04.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-dev_1.2 .5-0ubuntu0.10.04.1_i386.deb

Mandriva Linux Mandrake 2010.1

• Mandriva libwebkitgtk1.0-devel-1.2.7-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libwebkitgtk1.0_2-1.2.7-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva webkit-1.2.7-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva webkit-gtklauncher-1.2.7-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva webkit-jsc-1.2.7-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva webkit1.0-1.2.7-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva webkit1.0-webinspector-1.2.7-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 10.10 powerpc

• Ubuntu gir1.0-webkit-1.0_1.2.5-0ubuntu0.10.10.1_powerpc.deb
  http://ports.ubuntu.com/pool/universe/w/webkit/gir1.0-webkit-1.0_1.2.5 -0ubuntu0.10.10.1_powerpc.deb


• Ubuntu libwebkit-1.0-2-dbg_1.2.5-0ubuntu0.10.10.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2-dbg_1.2.5-0 ubuntu0.10.10.1_powerpc.deb


• Ubuntu libwebkit-1.0-2_1.2.5-0ubuntu0.10.10.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2_1.2.5-0ubun tu0.10.10.1_powerpc.deb


• Ubuntu libwebkit-1.0-common_1.2.5-0ubuntu0.10.10.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-com mon_1.2.5-0ubuntu0.10.10.1_all.deb


• Ubuntu libwebkit-dev_1.2.5-0ubuntu0.10.10.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-dev_1.2.5-0ubuntu 0.10.10.1_powerpc.deb

Ubuntu Ubuntu Linux 10.10 i386

• Ubuntu gir1.0-webkit-1.0_1.2.5-0ubuntu0.10.10.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/w/webkit/gir1.0-webkit -1.0_1.2.5-0ubuntu0.10.10.1_i386.deb


• Ubuntu libwebkit-1.0-2-dbg_1.2.5-0ubuntu0.10.10.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-2-d bg_1.2.5-0ubuntu0.10.10.1_i386.deb


• Ubuntu libwebkit-1.0-2_1.2.5-0ubuntu0.10.10.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-2_1 .2.5-0ubuntu0.10.10.1_i386.deb


• Ubuntu libwebkit-1.0-common_1.2.5-0ubuntu0.10.10.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-com mon_1.2.5-0ubuntu0.10.10.1_all.deb


• Ubuntu libwebkit-dev_1.2.5-0ubuntu0.10.10.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-dev_1.2 .5-0ubuntu0.10.10.1_i386.deb

Webkit Floating Point Datatype Remote Code Execution Vulnerability

References:

• webkit 1.2.5 security update tracking bug (Ubuntu)
  
• Webkit Homepage (Webkit)