Webkit History Feature Address Bar URI Spoofing Vulnerability
BID:44203
Info
Webkit History Feature Address Bar URI Spoofing Vulnerability
| Bugtraq ID: | 44203 |
| Class: | Design Error |
| CVE: |
CVE-2010-3115 |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 19 2010 12:00AM |
| Updated: | Apr 13 2015 10:03PM |
| Credit: | Mike Taylor |
| Vulnerable: |
WebKit Open Source Project WebKit 1.2.3 WebKit Open Source Project WebKit 1.2.2 WebKit Open Source Project WebKit r52833 WebKit Open Source Project WebKit r52401 WebKit Open Source Project WebKit r51295 WebKit Open Source Project WebKit r38566 WebKit Open Source Project WebKit 1.2.X WebKit Open Source Project WebKit 1.2.2-1 WebKit Open Source Project WebKit 0 Ubuntu Ubuntu Linux 9.10 sparc Ubuntu Ubuntu Linux 9.10 powerpc Ubuntu Ubuntu Linux 9.10 lpia Ubuntu Ubuntu Linux 9.10 i386 Ubuntu Ubuntu Linux 9.10 amd64 Ubuntu Ubuntu Linux 10.10 powerpc Ubuntu Ubuntu Linux 10.10 i386 Ubuntu Ubuntu Linux 10.10 amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 amd64 Redhat Enterprise Linux Workstation Optional 6 Redhat Enterprise Linux Workstation 6 Redhat Enterprise Linux Server Optional 6 Redhat Enterprise Linux Server 6 Redhat Enterprise Linux HPC Node Optional 6 Redhat Enterprise Linux Desktop Optional 6 Redhat Enterprise Linux Desktop 6 Mandriva Linux Mandrake 2010.1 x86_64 Mandriva Linux Mandrake 2010.1 Google Chrome 5.0.375 99 Google Chrome 5.0.375 86 Google Chrome 5.0.375 125 Google Chrome 5.0.375 .70 Google Chrome 5.0.375 .55 Google Chrome 5.0.375.98 Google Chrome 5.0.375.97 Google Chrome 5.0.375.96 Google Chrome 5.0.375.95 Google Chrome 5.0.375.94 Google Chrome 5.0.375.93 Google Chrome 5.0.375.92 Google Chrome 5.0.375.91 Google Chrome 5.0.375.90 Google Chrome 5.0.375.9 Google Chrome 5.0.375.89 Google Chrome 5.0.375.88 Google Chrome 5.0.375.87 Google Chrome 5.0.375.85 Google Chrome 5.0.375.84 Google Chrome 5.0.375.83 Google Chrome 5.0.375.82 Google Chrome 5.0.375.81 Google Chrome 5.0.375.80 Google Chrome 5.0.375.8 Google Chrome 5.0.375.79 Google Chrome 5.0.375.78 Google Chrome 5.0.375.77 Google Chrome 5.0.375.76 Google Chrome 5.0.375.75 Google Chrome 5.0.375.74 Google Chrome 5.0.375.73 Google Chrome 5.0.375.72 Google Chrome 5.0.375.71 Google Chrome 5.0.375.7 Google Chrome 5.0.375.69 Google Chrome 5.0.375.68 Google Chrome 5.0.375.67 Google Chrome 5.0.375.66 Google Chrome 5.0.375.65 Google Chrome 5.0.375.64 Google Chrome 5.0.375.63 Google Chrome 5.0.375.62 Google Chrome 5.0.375.61 Google Chrome 5.0.375.60 Google Chrome 5.0.375.6 Google Chrome 5.0.375.59 Google Chrome 5.0.375.58 Google Chrome 5.0.375.57 Google Chrome 5.0.375.56 Google Chrome 5.0.375.54 Google Chrome 5.0.375.53 Google Chrome 5.0.375.52 Google Chrome 5.0.375.51 Google Chrome 5.0.375.50 Google Chrome 5.0.375.5 Google Chrome 5.0.375.49 Google Chrome 5.0.375.48 Google Chrome 5.0.375.47 Google Chrome 5.0.375.46 Google Chrome 5.0.375.45 Google Chrome 5.0.375.44 Google Chrome 5.0.375.43 Google Chrome 5.0.375.42 Google Chrome 5.0.375.41 Google Chrome 5.0.375.40 Google Chrome 5.0.375.4 Google Chrome 5.0.375.39 Google Chrome 5.0.375.38 Google Chrome 5.0.375.37 Google Chrome 5.0.375.36 Google Chrome 5.0.375.35 Google Chrome 5.0.375.34 Google Chrome 5.0.375.33 Google Chrome 5.0.375.32 Google Chrome 5.0.375.31 Google Chrome 5.0.375.30 Google Chrome 5.0.375.3 Google Chrome 5.0.375.29 Google Chrome 5.0.375.28 Google Chrome 5.0.375.27 Google Chrome 5.0.375.26 Google Chrome 5.0.375.25 Google Chrome 5.0.375.23 Google Chrome 5.0.375.22 Google Chrome 5.0.375.21 Google Chrome 5.0.375.20 Google Chrome 5.0.375.2 Google Chrome 5.0.375.19 Google Chrome 5.0.375.18 Google Chrome 5.0.375.17 Google Chrome 5.0.375.16 Google Chrome 5.0.375.15 Google Chrome 5.0.375.14 Google Chrome 5.0.375.13 Google Chrome 5.0.375.126 Google Chrome 5.0.375.12 Google Chrome 5.0.375.11 Google Chrome 5.0.375.10 Google Chrome 5.0.375.1 Google Chrome 5.0.375.0 Google Chrome 5.0.374.0 Google Chrome 5.0.373.0 Google Chrome 5.0.372.0 Google Chrome 5.0.371.0 Google Chrome 5.0.370.0 Google Chrome 5.0.369.2 Google Chrome 5.0.369.1 Google Chrome 5.0.369.0 Google Chrome 5.0.368.0 Google Chrome 5.0.367.0 Google Chrome 5.0.366.4 Google Chrome 5.0.366.3 Google Chrome 5.0.366.2 Google Chrome 5.0.366.1 Google Chrome 5.0.366.0 Google Chrome 5.0.365.0 Google Chrome 5.0.364.0 Google Chrome 5.0.363.0 Google Chrome 5.0.362.0 Google Chrome 5.0.361.0 Google Chrome 5.0.360.5 Google Chrome 5.0.360.4 Google Chrome 5.0.360.3 Google Chrome 5.0.360.0 Google Chrome 5.0.359.0 Google Chrome 5.0.358.0 Google Chrome 5.0.357.0 Google Chrome 5.0.356.2 Google Chrome 5.0.356.1 Google Chrome 5.0.356.0 Google Chrome 5.0.355.0 Google Chrome 5.0.354.1 Google Chrome 5.0.354.0 Google Chrome 5.0.353.0 Google Chrome 5.0.351.0 Google Chrome 5.0.350.1 Google Chrome 5.0.350.0 Google Chrome 5.0.349.0 Google Chrome 5.0.348.0 Google Chrome 5.0.347.0 Google Chrome 5.0.346.0 Google Chrome 5.0.345.0 Google Chrome 5.0.344.0 Google Chrome 5.0.343.0 Google Chrome 5.0.342.9 Google Chrome 5.0.342.8 Google Chrome 5.0.342.7 Google Chrome 5.0.342.6 Google Chrome 5.0.342.5 Google Chrome 5.0.342.4 Google Chrome 5.0.342.3 Google Chrome 5.0.342.2 Google Chrome 5.0.342.1 Google Chrome 5.0.342.0 Google Chrome 5.0.341.0 Google Chrome 5.0.340.0 Google Chrome 5.0.339.0 Google Chrome 5.0.338.0 Google Chrome 5.0.337.0 Google Chrome 5.0.336.0 Google Chrome 5.0.335.4 Google Chrome 5.0.335.3 Google Chrome 5.0.335.2 Google Chrome 5.0.335.1 Google Chrome 5.0.335.0 Google Chrome 5.0.334.0 Google Chrome 5.0.333.0 Google Chrome 5.0.332.0 Google Chrome 5.0.330.0 Google Chrome 5.0.329.0 Google Chrome 5.0.328.0 Google Chrome 5.0.327.0 Google Chrome 5.0.326.0 Google Chrome 5.0.325.0 Google Chrome 5.0.324.0 Google Chrome 5.0.323.0 Google Chrome 5.0.322.2 Google Chrome 5.0.322.1 Google Chrome 5.0.322.0 Google Chrome 5.0.321.0 Google Chrome 5.0.320.0 Google Chrome 5.0.319.0 Google Chrome 5.0.318.0 Google Chrome 5.0.317.2 Google Chrome 5.0.317.1 Google Chrome 5.0.317.0 Google Chrome 5.0.316.0 Google Chrome 5.0.315.0 Google Chrome 5.0.314.1 Google Chrome 5.0.314.0 Google Chrome 5.0.313.0 Google Chrome 5.0.309.0 Google Chrome 5.0.308.0 Google Chrome 5.0.307.9 Google Chrome 5.0.307.8 Google Chrome 5.0.307.7 Google Chrome 5.0.307.6 Google Chrome 5.0.307.5 Google Chrome 5.0.307.4 Google Chrome 5.0.307.3 Google Chrome 5.0.307.11 Google Chrome 5.0.307.10 Google Chrome 5.0.307.1 Google Chrome 5.0.306.1 Google Chrome 5.0.306.0 |
| Not Vulnerable: |
WebKit Open Source Project WebKit 1.2.5 Google Chrome 5.0.375 127 |
Discussion
Webkit History Feature Address Bar URI Spoofing Vulnerability
Webkit is affected by a URI-spoofing vulnerability.
An attacker may leverage this issue by inserting arbitrary content to spoof a URI presented to an unsuspecting user. This may lead to a false sense of trust because the victim may be presented with a URI of a seemingly trusted site while interacting with the attacker's malicious site.
NOTE: This issue was previously covered in BID 42571 (Google Chrome prior to 5.0.375.127 Multiple Security Vulnerabilities) but has been given its own record to better document it.
Webkit is affected by a URI-spoofing vulnerability.
An attacker may leverage this issue by inserting arbitrary content to spoof a URI presented to an unsuspecting user. This may lead to a false sense of trust because the victim may be presented with a URI of a seemingly trusted site while interacting with the attacker's malicious site.
NOTE: This issue was previously covered in BID 42571 (Google Chrome prior to 5.0.375.127 Multiple Security Vulnerabilities) but has been given its own record to better document it.
Exploit / POC
Webkit History Feature Address Bar URI Spoofing Vulnerability
To exploit this issue, an attacker must entice an unsuspecting user to view a maliciously crafted web document.
To exploit this issue, an attacker must entice an unsuspecting user to view a maliciously crafted web document.
Solution / Fix
Webkit History Feature Address Bar URI Spoofing Vulnerability
Solution:
Updates are available. Please see the references for more information.
Ubuntu Ubuntu Linux 9.10 powerpc
Ubuntu Ubuntu Linux 9.10 lpia
Ubuntu Ubuntu Linux 10.04 powerpc
Ubuntu Ubuntu Linux 9.10 amd64
Solution:
Updates are available. Please see the references for more information.
Ubuntu Ubuntu Linux 9.10 powerpc
-
Ubuntu libwebkit-1.0-2-dbg_1.2.5-0ubuntu0.9.10.1_powerpc.deb
http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2-dbg_1.2.5-0 ubuntu0.9.10.1_powerpc.deb -
Ubuntu libwebkit-1.0-2_1.2.5-0ubuntu0.9.10.1_powerpc.deb
http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2_1.2.5-0ubun tu0.9.10.1_powerpc.deb -
Ubuntu libwebkit-1.0-common_1.2.5-0ubuntu0.9.10.1_all.deb
http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-com mon_1.2.5-0ubuntu0.9.10.1_all.deb -
Ubuntu libwebkit-dev_1.2.5-0ubuntu0.9.10.1_powerpc.deb
http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-dev_1.2.5-0ubuntu 0.9.10.1_powerpc.deb
Ubuntu Ubuntu Linux 9.10 lpia
-
Ubuntu libwebkit-1.0-2-dbg_1.2.5-0ubuntu0.9.10.1_lpia.deb
http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2-dbg_1.2.5-0 ubuntu0.9.10.1_lpia.deb -
Ubuntu libwebkit-1.0-2_1.2.5-0ubuntu0.9.10.1_lpia.deb
http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2_1.2.5-0ubun tu0.9.10.1_lpia.deb -
Ubuntu libwebkit-1.0-common_1.2.5-0ubuntu0.9.10.1_all.deb
http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-com mon_1.2.5-0ubuntu0.9.10.1_all.deb -
Ubuntu libwebkit-dev_1.2.5-0ubuntu0.9.10.1_lpia.deb
http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-dev_1.2.5-0ubuntu 0.9.10.1_lpia.deb
Ubuntu Ubuntu Linux 10.04 powerpc
-
Ubuntu gir1.0-webkit-1.0_1.2.5-0ubuntu0.10.04.1_powerpc.deb
http://ports.ubuntu.com/pool/universe/w/webkit/gir1.0-webkit-1.0_1.2.5 -0ubuntu0.10.04.1_powerpc.deb -
Ubuntu libwebkit-1.0-2-dbg_1.2.5-0ubuntu0.10.04.1_powerpc.deb
http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2-dbg_1.2.5-0 ubuntu0.10.04.1_powerpc.deb -
Ubuntu libwebkit-1.0-2_1.2.5-0ubuntu0.10.04.1_powerpc.deb
http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2_1.2.5-0ubun tu0.10.04.1_powerpc.deb -
Ubuntu libwebkit-1.0-common_1.2.5-0ubuntu0.10.04.1_all.deb
http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-com mon_1.2.5-0ubuntu0.10.04.1_all.deb -
Ubuntu libwebkit-dev_1.2.5-0ubuntu0.10.04.1_powerpc.deb
http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-dev_1.2.5-0ubuntu 0.10.04.1_powerpc.deb
Ubuntu Ubuntu Linux 9.10 amd64
-
Ubuntu libwebkit-1.0-2-dbg_1.2.5-0ubuntu0.9.10.1_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-2-d bg_1.2.5-0ubuntu0.9.10.1_amd64.deb -
Ubuntu libwebkit-1.0-2_1.2.5-0ubuntu0.9.10.1_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-2_1 .2.5-0ubuntu0.9.10.1_amd64.deb -
Ubuntu libwebkit-1.0-common_1.2.5-0ubuntu0.9.10.1_all.deb
http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-com mon_1.2.5-0ubuntu0.9.10.1_all.deb -
Ubuntu libwebkit-dev_1.2.5-0ubuntu0.9.10.1_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-dev_1.2 .5-0ubuntu0.9.10.1_amd64.deb
References
Webkit History Feature Address Bar URI Spoofing Vulnerability
References:
References:
- Google Chrome 5.0.375.127 Stable Channel Update (Google)
- Google Chrome Homepage (Google)
- webkit 1.2.5 security update tracking bug (Ubuntu)
- Webkit Homepage (WebKit)