WebKit Images Cross Domain Information Disclosure Vulnerability
BID:44206
Info
WebKit Images Cross Domain Information Disclosure Vulnerability
| Bugtraq ID: | 44206 |
| Class: | Origin Validation Error |
| CVE: |
CVE-2010-3259 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 02 2010 12:00AM |
| Updated: | Apr 13 2015 10:17PM |
| Credit: | Isaac Dawson |
| Vulnerable: |
WebKit Open Source Project WebKit 1.2.3 WebKit Open Source Project WebKit 1.2.2 WebKit Open Source Project WebKit 1.2.2-1 WebKit Open Source Project WebKit 0 Ubuntu Ubuntu Linux 9.10 sparc Ubuntu Ubuntu Linux 9.10 powerpc Ubuntu Ubuntu Linux 9.10 lpia Ubuntu Ubuntu Linux 9.10 i386 Ubuntu Ubuntu Linux 9.10 amd64 Ubuntu Ubuntu Linux 10.10 powerpc Ubuntu Ubuntu Linux 10.10 i386 Ubuntu Ubuntu Linux 10.10 amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 amd64 S.u.S.E. openSUSE 11.3 S.u.S.E. openSUSE 11.2 Redhat Enterprise Linux Workstation Optional 6 Redhat Enterprise Linux Workstation 6 Redhat Enterprise Linux Server Optional 6 Redhat Enterprise Linux Server 6 Redhat Enterprise Linux HPC Node Optional 6 Redhat Enterprise Linux Desktop Optional 6 Redhat Enterprise Linux Desktop 6 Mandriva Linux Mandrake 2010.1 x86_64 Mandriva Linux Mandrake 2010.1 Google Chrome 6.0.472.52 Google Chrome 6.0.472.51 Google Chrome 6.0.472.50 Google Chrome 6.0.472.5 Google Chrome 6.0.472.49 Google Chrome 6.0.472.48 Google Chrome 6.0.472.47 Google Chrome 6.0.472.46 Google Chrome 6.0.472.45 Google Chrome 6.0.472.44 Google Chrome 6.0.472.43 Google Chrome 6.0.472.42 Google Chrome 6.0.472.41 Google Chrome 6.0.472.40 Google Chrome 6.0.472.4 Google Chrome 6.0.472.39 Google Chrome 6.0.472.38 Google Chrome 6.0.472.37 Google Chrome 6.0.472.36 Google Chrome 6.0.472.35 Google Chrome 6.0.472.34 Google Chrome 6.0.472.33 Google Chrome 6.0.472.32 Google Chrome 6.0.472.31 Google Chrome 6.0.472.30 Google Chrome 6.0.472.3 Google Chrome 6.0.472.29 Google Chrome 6.0.472.28 Google Chrome 6.0.472.27 Google Chrome 6.0.472.26 Google Chrome 6.0.472.25 Google Chrome 6.0.472.24 Google Chrome 6.0.472.23 Google Chrome 6.0.472.22 Google Chrome 6.0.472.21 Google Chrome 6.0.472.20 Google Chrome 6.0.472.2 Google Chrome 6.0.472.19 Google Chrome 6.0.472.18 Google Chrome 6.0.472.17 Google Chrome 6.0.472.16 Google Chrome 6.0.472.15 Google Chrome 6.0.472.14 Google Chrome 6.0.472.13 Google Chrome 6.0.472.12 Google Chrome 6.0.472.11 Google Chrome 6.0.472.10 Google Chrome 6.0.472.1 Google Chrome 6.0.472.0 Google Chrome 6.0.471.0 Google Chrome 6.0.470.0 Google Chrome 6.0.469.0 Google Chrome 6.0.467.0 Google Chrome 6.0.466.6 Google Chrome 6.0.466.5 Google Chrome 6.0.466.4 Google Chrome 6.0.466.3 Google Chrome 6.0.466.2 Google Chrome 6.0.466.1 Google Chrome 6.0.466.0 Google Chrome 6.0.465.2 Google Chrome 6.0.465.1 Google Chrome 6.0.464.1 Google Chrome 6.0.462.0 Google Chrome 6.0.461.0 Google Chrome 6.0.460.0 Google Chrome 6.0.459.0 Google Chrome 6.0.458.2 Google Chrome 6.0.458.1 Google Chrome 6.0.458.0 Google Chrome 6.0.457.0 Google Chrome 6.0.456.0 Google Chrome 6.0.455.0 Google Chrome 6.0.454.0 Google Chrome 6.0.453.1 Google Chrome 6.0.453.0 Google Chrome 6.0.452.1 Google Chrome 6.0.452.0 Google Chrome 6.0.451.0 Google Chrome 6.0.450.4 Google Chrome 6.0.450.3 Google Chrome 6.0.450.2 Google Chrome 6.0.450.1 Google Chrome 6.0.450.0 Google Chrome 6.0.449.0 Google Chrome 6.0.447.2 Google Chrome 6.0.447.1 Google Chrome 6.0.447.0 Google Chrome 6.0.446.0 Google Chrome 6.0.445.1 Google Chrome 6.0.445.0 Google Chrome 6.0.444.0 Google Chrome 6.0.443.0 Google Chrome 6.0.441.0 Google Chrome 6.0.440.0 Google Chrome 6.0.438.0 Google Chrome 6.0.437.3 Google Chrome 6.0.437.2 Google Chrome 6.0.437.1 Google Chrome 6.0.437.0 Google Chrome 6.0.436.0 Google Chrome 6.0.435.0 Google Chrome 6.0.434.0 Google Chrome 6.0.433.0 Google Chrome 6.0.432.0 Google Chrome 6.0.431.0 Google Chrome 6.0.430.0 Google Chrome 6.0.428.0 Google Chrome 6.0.427.0 Google Chrome 6.0.426.0 Google Chrome 6.0.425.0 Google Chrome 6.0.424.0 Google Chrome 6.0.423.0 Google Chrome 6.0.422.0 Google Chrome 6.0.421.0 Google Chrome 6.0.419.0 Google Chrome 6.0.418.9 Google Chrome 6.0.418.8 Google Chrome 6.0.418.7 Google Chrome 6.0.418.6 Google Chrome 6.0.418.5 Google Chrome 6.0.418.4 Google Chrome 6.0.418.3 Google Chrome 6.0.418.2 Google Chrome 6.0.418.1 Google Chrome 6.0.418.0 Google Chrome 6.0.417.0 Google Chrome 6.0.416.1 Google Chrome 6.0.416.0 Google Chrome 6.0.415.1 Google Chrome 6.0.415.0 Google Chrome 6.0.414.0 Google Chrome 6.0.413.0 Google Chrome 6.0.412.0 Google Chrome 6.0.411.0 Google Chrome 6.0.410.0 Google Chrome 6.0.409.0 Google Chrome 6.0.408.9 Google Chrome 6.0.408.8 Google Chrome 6.0.408.7 Google Chrome 6.0.408.6 Google Chrome 6.0.408.5 Google Chrome 6.0.408.4 Google Chrome 6.0.408.3 Google Chrome 6.0.408.2 Google Chrome 6.0.408.10 Google Chrome 6.0.408.1 Google Chrome 6.0.408.0 Google Chrome 6.0.407.0 Google Chrome 6.0.406.0 Google Chrome 6.0.405.0 Google Chrome 6.0.404.2 Google Chrome 6.0.404.1 Google Chrome 6.0.404.0 Google Chrome 6.0.403.0 Google Chrome 6.0.401.1 Google Chrome 6.0.401.0 Google Chrome 6.0.400.0 Google Chrome 6.0.399.0 Google Chrome 6.0.398.0 Google Chrome 6.0.397.0 Gentoo Linux Apple Safari 4.1.2 for Windows Apple Safari 4.0.5 for Windows Apple Safari 4.0.5 Apple Safari 4.0.4 for Windows Apple Safari 4.0.4 Apple Safari 4.0.3 for Windows Apple Safari 4.0.3 Apple Safari 4.0.2 for Windows Apple Safari 4.0.2 Apple Safari 4.0.1 Apple Safari 5.0.2 for Windows Apple Safari 5.0.2 Apple Safari 5.0.1 for Windows Apple Safari 5.0.1 Apple Safari 5.0 for Windows Apple Safari 5.0 Apple Safari 4.1.2 Apple Safari 4.1.1 Apple Safari 4.1 Apple Safari 4 for Windows Apple Safari 4 Beta Apple Safari 4 Apple iPod Touch 3.1.3 Apple iPod Touch 3.1.2 Apple iPod Touch 3.1.1 Apple iPod Touch 2.2.1 Apple iPod Touch 3.0 Apple iPod Touch 2.2 Apple iPod Touch 2.1 Apple iPhone 4.0.1 Apple iPhone 3.2.1 Apple iPhone 3.1.3 Apple iPhone 3.1.2 Apple iPhone 3.0.1 Apple iPhone 2.2.1 Apple iPhone 2.0.2 Apple iPhone 2.0.1 Apple iPhone 4.1 Apple iPhone 4.0 Apple iPhone 3.2 Apple iPhone 3.1 Apple iPhone 3.0 Apple iPhone 2.2 Apple iPhone 2.1 Apple iPhone 2.0 Apple iPad 3.2.1 Apple iPad 3.2.2 Apple iPad 3.2 Apple iPad 0 Apple iOS 4.0.2 Apple iOS 4.0.1 Apple iOS 3.2.2 Apple iOS 3.2.1 Apple iOS 4.2 beta Apple iOS 4.1 Apple iOS 4 Apple iOS 3.2 |
| Not Vulnerable: |
WebKit Open Source Project WebKit 1.2.5 Google Chrome 6.0.472.53 Apple Safari 5.0.3 for Windows Apple Safari 5.0.3 Apple Safari 4.1.3 for Windows Apple Safari 4.1.3 Apple iOS 4.2 |
Discussion
WebKit Images Cross Domain Information Disclosure Vulnerability
WebKit is prone to a cross-domain information-disclosure vulnerability because the application fails to enforce the same-origin policy.
An attacker can exploit this issue by enticing an unsuspecting user into viewing a page containing malicious content.
Successful exploits will allow attackers to bypass the same-origin policy and obtain potentially sensitive information; other attacks are possible.
NOTE: This issue was previously covered in BID 42952 (Google Chrome prior to 6.0.472.53 Multiple Security Vulnerabilities), but has been assigned its own record to better document it.
WebKit is prone to a cross-domain information-disclosure vulnerability because the application fails to enforce the same-origin policy.
An attacker can exploit this issue by enticing an unsuspecting user into viewing a page containing malicious content.
Successful exploits will allow attackers to bypass the same-origin policy and obtain potentially sensitive information; other attacks are possible.
NOTE: This issue was previously covered in BID 42952 (Google Chrome prior to 6.0.472.53 Multiple Security Vulnerabilities), but has been assigned its own record to better document it.
Exploit / POC
WebKit Images Cross Domain Information Disclosure Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
WebKit Images Cross Domain Information Disclosure Vulnerability
Solution:
Updates are available. Please see the references for more information.
Ubuntu Ubuntu Linux 9.10 powerpc
Ubuntu Ubuntu Linux 9.10 lpia
Ubuntu Ubuntu Linux 10.04 powerpc
Ubuntu Ubuntu Linux 9.10 amd64
Apple Safari 5.0.2 for Windows
Solution:
Updates are available. Please see the references for more information.
Ubuntu Ubuntu Linux 9.10 powerpc
-
Ubuntu libwebkit-1.0-2-dbg_1.2.5-0ubuntu0.9.10.1_powerpc.deb
http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2-dbg_1.2.5-0 ubuntu0.9.10.1_powerpc.deb -
Ubuntu libwebkit-1.0-2_1.2.5-0ubuntu0.9.10.1_powerpc.deb
http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2_1.2.5-0ubun tu0.9.10.1_powerpc.deb -
Ubuntu libwebkit-1.0-common_1.2.5-0ubuntu0.9.10.1_all.deb
http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-com mon_1.2.5-0ubuntu0.9.10.1_all.deb -
Ubuntu libwebkit-dev_1.2.5-0ubuntu0.9.10.1_powerpc.deb
http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-dev_1.2.5-0ubuntu 0.9.10.1_powerpc.deb
Ubuntu Ubuntu Linux 9.10 lpia
-
Ubuntu libwebkit-1.0-2-dbg_1.2.5-0ubuntu0.9.10.1_lpia.deb
http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2-dbg_1.2.5-0 ubuntu0.9.10.1_lpia.deb -
Ubuntu libwebkit-1.0-2_1.2.5-0ubuntu0.9.10.1_lpia.deb
http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2_1.2.5-0ubun tu0.9.10.1_lpia.deb -
Ubuntu libwebkit-1.0-common_1.2.5-0ubuntu0.9.10.1_all.deb
http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-com mon_1.2.5-0ubuntu0.9.10.1_all.deb -
Ubuntu libwebkit-dev_1.2.5-0ubuntu0.9.10.1_lpia.deb
http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-dev_1.2.5-0ubuntu 0.9.10.1_lpia.deb
Ubuntu Ubuntu Linux 10.04 powerpc
-
Ubuntu gir1.0-webkit-1.0_1.2.5-0ubuntu0.10.04.1_powerpc.deb
http://ports.ubuntu.com/pool/universe/w/webkit/gir1.0-webkit-1.0_1.2.5 -0ubuntu0.10.04.1_powerpc.deb -
Ubuntu libwebkit-1.0-2-dbg_1.2.5-0ubuntu0.10.04.1_powerpc.deb
http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2-dbg_1.2.5-0 ubuntu0.10.04.1_powerpc.deb -
Ubuntu libwebkit-1.0-2_1.2.5-0ubuntu0.10.04.1_powerpc.deb
http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2_1.2.5-0ubun tu0.10.04.1_powerpc.deb -
Ubuntu libwebkit-1.0-common_1.2.5-0ubuntu0.10.04.1_all.deb
http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-com mon_1.2.5-0ubuntu0.10.04.1_all.deb -
Ubuntu libwebkit-dev_1.2.5-0ubuntu0.10.04.1_powerpc.deb
http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-dev_1.2.5-0ubuntu 0.10.04.1_powerpc.deb
Ubuntu Ubuntu Linux 9.10 amd64
-
Ubuntu libwebkit-1.0-2-dbg_1.2.5-0ubuntu0.9.10.1_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-2-d bg_1.2.5-0ubuntu0.9.10.1_amd64.deb -
Ubuntu libwebkit-1.0-2_1.2.5-0ubuntu0.9.10.1_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-2_1 .2.5-0ubuntu0.9.10.1_amd64.deb -
Ubuntu libwebkit-1.0-common_1.2.5-0ubuntu0.9.10.1_all.deb
http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-com mon_1.2.5-0ubuntu0.9.10.1_all.deb -
Ubuntu libwebkit-dev_1.2.5-0ubuntu0.9.10.1_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-dev_1.2 .5-0ubuntu0.9.10.1_amd64.deb
Apple Safari 5.0.2 for Windows
-
Apple APPLE-SA-2010-11-18-1Safari_Setup.exe
Safari for Windows 7, Vista or XP from the Microsoft Choice Screen
http://www.apple.com/safari/download/ -
Apple APPLE-SA-2010-11-18-1SafariQuickTimeSetup.exe
Safari+QuickTime for Windows 7, Vista or XP
http://www.apple.com/safari/download/ -
Apple APPLE-SA-2010-11-18-1SafariSetup.exe
Safari for Windows 7, Vista or XP
http://www.apple.com/safari/download/
References
WebKit Images Cross Domain Information Disclosure Vulnerability
References:
References:
- Google Chrome Homepage (Google)
- Google Chrome Updates (Google)
- webkit 1.2.5 security update tracking bug (Ubuntu)
- Webkit Homepage (WebKit)