Google Chrome Bidi Algorithm Memory Corruption Vulnerability
BID:44217
Info
Google Chrome Bidi Algorithm Memory Corruption Vulnerability
| Bugtraq ID: | 44217 |
| Class: | Unknown |
| CVE: |
CVE-2010-2648 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 02 2010 12:00AM |
| Updated: | Mar 19 2015 09:24AM |
| Credit: | wushi of team509 |
| Vulnerable: |
WebKit Open Source Project WebKit 1.2.3 WebKit Open Source Project WebKit 1.2.2 WebKit Open Source Project WebKit 1.2.2-1 WebKit Open Source Project WebKit 0 Ubuntu Ubuntu Linux 9.10 sparc Ubuntu Ubuntu Linux 9.10 powerpc Ubuntu Ubuntu Linux 9.10 lpia Ubuntu Ubuntu Linux 9.10 i386 Ubuntu Ubuntu Linux 9.10 amd64 Ubuntu Ubuntu Linux 10.10 powerpc Ubuntu Ubuntu Linux 10.10 i386 Ubuntu Ubuntu Linux 10.10 amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 amd64 Mandriva Linux Mandrake 2010.1 x86_64 Mandriva Linux Mandrake 2010.1 Google Chrome 5.0.375 86 Google Chrome 5.0.375 127 Google Chrome 5.0.375 125 Google Chrome 5.0.375 .70 Google Chrome 5.0.375 .55 Google Chrome 5.0.375.98 Google Chrome 5.0.375.97 Google Chrome 5.0.375.96 Google Chrome 5.0.375.95 Google Chrome 5.0.375.94 Google Chrome 5.0.375.93 Google Chrome 5.0.375.92 Google Chrome 5.0.375.91 Google Chrome 5.0.375.90 Google Chrome 5.0.375.9 Google Chrome 5.0.375.89 Google Chrome 5.0.375.88 Google Chrome 5.0.375.87 Google Chrome 5.0.375.85 Google Chrome 5.0.375.84 Google Chrome 5.0.375.83 Google Chrome 5.0.375.82 Google Chrome 5.0.375.81 Google Chrome 5.0.375.80 Google Chrome 5.0.375.8 Google Chrome 5.0.375.79 Google Chrome 5.0.375.78 Google Chrome 5.0.375.77 Google Chrome 5.0.375.76 Google Chrome 5.0.375.75 Google Chrome 5.0.375.74 Google Chrome 5.0.375.73 Google Chrome 5.0.375.72 Google Chrome 5.0.375.71 Google Chrome 5.0.375.7 Google Chrome 5.0.375.69 Google Chrome 5.0.375.68 Google Chrome 5.0.375.67 Google Chrome 5.0.375.66 Google Chrome 5.0.375.65 Google Chrome 5.0.375.64 Google Chrome 5.0.375.63 Google Chrome 5.0.375.62 Google Chrome 5.0.375.61 Google Chrome 5.0.375.60 Google Chrome 5.0.375.6 Google Chrome 5.0.375.59 Google Chrome 5.0.375.58 Google Chrome 5.0.375.57 Google Chrome 5.0.375.56 Google Chrome 5.0.375.54 Google Chrome 5.0.375.53 Google Chrome 5.0.375.52 Google Chrome 5.0.375.51 Google Chrome 5.0.375.50 Google Chrome 5.0.375.5 Google Chrome 5.0.375.49 Google Chrome 5.0.375.48 Google Chrome 5.0.375.47 Google Chrome 5.0.375.46 Google Chrome 5.0.375.45 Google Chrome 5.0.375.44 Google Chrome 5.0.375.43 Google Chrome 5.0.375.42 Google Chrome 5.0.375.41 Google Chrome 5.0.375.40 Google Chrome 5.0.375.4 Google Chrome 5.0.375.39 Google Chrome 5.0.375.38 Google Chrome 5.0.375.37 Google Chrome 5.0.375.36 Google Chrome 5.0.375.35 Google Chrome 5.0.375.34 Google Chrome 5.0.375.33 Google Chrome 5.0.375.32 Google Chrome 5.0.375.31 Google Chrome 5.0.375.30 Google Chrome 5.0.375.3 Google Chrome 5.0.375.29 Google Chrome 5.0.375.28 Google Chrome 5.0.375.27 Google Chrome 5.0.375.26 Google Chrome 5.0.375.25 Google Chrome 5.0.375.23 Google Chrome 5.0.375.22 Google Chrome 5.0.375.21 Google Chrome 5.0.375.20 Google Chrome 5.0.375.2 Google Chrome 5.0.375.19 Google Chrome 5.0.375.18 Google Chrome 5.0.375.17 Google Chrome 5.0.375.16 Google Chrome 5.0.375.15 Google Chrome 5.0.375.14 Google Chrome 5.0.375.13 Google Chrome 5.0.375.126 Google Chrome 5.0.375.12 Google Chrome 5.0.375.11 Google Chrome 5.0.375.10 Google Chrome 5.0.375.1 Google Chrome 5.0.375.0 Google Chrome 5.0.374.0 Google Chrome 5.0.373.0 Google Chrome 5.0.372.0 Google Chrome 5.0.371.0 Google Chrome 5.0.370.0 Google Chrome 5.0.369.2 Google Chrome 5.0.369.1 Google Chrome 5.0.369.0 Google Chrome 5.0.368.0 Google Chrome 5.0.367.0 Google Chrome 5.0.366.4 Google Chrome 5.0.366.3 Google Chrome 5.0.366.2 Google Chrome 5.0.366.1 Google Chrome 5.0.366.0 Google Chrome 5.0.365.0 Google Chrome 5.0.364.0 Google Chrome 5.0.363.0 Google Chrome 5.0.362.0 Google Chrome 5.0.361.0 Google Chrome 5.0.360.5 Google Chrome 5.0.360.4 Google Chrome 5.0.360.3 Google Chrome 5.0.360.0 Google Chrome 5.0.359.0 Google Chrome 5.0.358.0 Google Chrome 5.0.357.0 Google Chrome 5.0.356.2 Google Chrome 5.0.356.1 Google Chrome 5.0.356.0 Google Chrome 5.0.355.0 Google Chrome 5.0.354.1 Google Chrome 5.0.354.0 Google Chrome 5.0.353.0 Google Chrome 5.0.351.0 Google Chrome 5.0.350.1 Google Chrome 5.0.350.0 Google Chrome 5.0.349.0 Google Chrome 5.0.348.0 Google Chrome 5.0.347.0 Google Chrome 5.0.346.0 Google Chrome 5.0.345.0 Google Chrome 5.0.344.0 Google Chrome 5.0.343.0 Google Chrome 5.0.342.9 Google Chrome 5.0.342.8 Google Chrome 5.0.342.7 Google Chrome 5.0.342.6 Google Chrome 5.0.342.5 Google Chrome 5.0.342.4 Google Chrome 5.0.342.3 Google Chrome 5.0.342.2 Google Chrome 5.0.342.1 Google Chrome 5.0.342.0 Google Chrome 5.0.341.0 Google Chrome 5.0.340.0 Google Chrome 5.0.339.0 Google Chrome 5.0.338.0 Google Chrome 5.0.337.0 Google Chrome 5.0.336.0 Google Chrome 5.0.335.4 Google Chrome 5.0.335.3 Google Chrome 5.0.335.2 Google Chrome 5.0.335.1 Google Chrome 5.0.335.0 Google Chrome 5.0.334.0 Google Chrome 5.0.333.0 Google Chrome 5.0.332.0 Google Chrome 5.0.330.0 Google Chrome 5.0.329.0 Google Chrome 5.0.328.0 Google Chrome 5.0.327.0 Google Chrome 5.0.326.0 Google Chrome 5.0.325.0 Google Chrome 5.0.324.0 Google Chrome 5.0.323.0 Google Chrome 5.0.322.2 Google Chrome 5.0.322.1 Google Chrome 5.0.322.0 Google Chrome 5.0.321.0 Google Chrome 5.0.320.0 Google Chrome 5.0.319.0 Google Chrome 5.0.318.0 Google Chrome 5.0.317.2 Google Chrome 5.0.317.1 Google Chrome 5.0.317.0 Google Chrome 5.0.316.0 Google Chrome 5.0.315.0 Google Chrome 5.0.314.1 Google Chrome 5.0.314.0 Google Chrome 5.0.313.0 Google Chrome 5.0.309.0 Google Chrome 5.0.308.0 Google Chrome 5.0.307.9 Google Chrome 5.0.307.8 Google Chrome 5.0.307.7 Google Chrome 5.0.307.6 Google Chrome 5.0.307.5 Google Chrome 5.0.307.4 Google Chrome 5.0.307.3 Google Chrome 5.0.307.11 Google Chrome 5.0.307.10 Google Chrome 5.0.307.1 Google Chrome 5.0.306.1 Google Chrome 5.0.306.0 |
| Not Vulnerable: |
WebKit Open Source Project WebKit 1.2.5 Google Chrome 5.0.375 99 |
Discussion
Google Chrome Bidi Algorithm Memory Corruption Vulnerability
Google Chrome is prone to a memory-corruption vulnerability.
An attacker can exploit this issue by enticing an unsuspecting victim to view a malicious webpage.
Successful exploits will allow attackers to execute arbitrary code in the context of the browser. Failed exploit attempts will result in a denial-of-service condition.
Versions prior to Chrome 5.0.375.99 are vulnerable.
NOTE: This issue was previously covered in 41334 (Google Chrome prior to 5.0.375.99 Multiple Security Vulnerabilities) but has been assigned its own record to better document it.
Google Chrome is prone to a memory-corruption vulnerability.
An attacker can exploit this issue by enticing an unsuspecting victim to view a malicious webpage.
Successful exploits will allow attackers to execute arbitrary code in the context of the browser. Failed exploit attempts will result in a denial-of-service condition.
Versions prior to Chrome 5.0.375.99 are vulnerable.
NOTE: This issue was previously covered in 41334 (Google Chrome prior to 5.0.375.99 Multiple Security Vulnerabilities) but has been assigned its own record to better document it.
Exploit / POC
Google Chrome Bidi Algorithm Memory Corruption Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Google Chrome Bidi Algorithm Memory Corruption Vulnerability
Solution:
Updates are available. Please see the references for more information.
Ubuntu Ubuntu Linux 9.10 powerpc
Ubuntu Ubuntu Linux 9.10 lpia
Ubuntu Ubuntu Linux 10.04 powerpc
Ubuntu Ubuntu Linux 9.10 amd64
Solution:
Updates are available. Please see the references for more information.
Ubuntu Ubuntu Linux 9.10 powerpc
-
Ubuntu libwebkit-1.0-2-dbg_1.2.5-0ubuntu0.9.10.1_powerpc.deb
http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2-dbg_1.2.5-0 ubuntu0.9.10.1_powerpc.deb -
Ubuntu libwebkit-1.0-2_1.2.5-0ubuntu0.9.10.1_powerpc.deb
http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2_1.2.5-0ubun tu0.9.10.1_powerpc.deb -
Ubuntu libwebkit-1.0-common_1.2.5-0ubuntu0.9.10.1_all.deb
http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-com mon_1.2.5-0ubuntu0.9.10.1_all.deb -
Ubuntu libwebkit-dev_1.2.5-0ubuntu0.9.10.1_powerpc.deb
http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-dev_1.2.5-0ubuntu 0.9.10.1_powerpc.deb
Ubuntu Ubuntu Linux 9.10 lpia
-
Ubuntu libwebkit-1.0-2-dbg_1.2.5-0ubuntu0.9.10.1_lpia.deb
http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2-dbg_1.2.5-0 ubuntu0.9.10.1_lpia.deb -
Ubuntu libwebkit-1.0-2_1.2.5-0ubuntu0.9.10.1_lpia.deb
http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2_1.2.5-0ubun tu0.9.10.1_lpia.deb -
Ubuntu libwebkit-1.0-common_1.2.5-0ubuntu0.9.10.1_all.deb
http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-com mon_1.2.5-0ubuntu0.9.10.1_all.deb -
Ubuntu libwebkit-dev_1.2.5-0ubuntu0.9.10.1_lpia.deb
http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-dev_1.2.5-0ubuntu 0.9.10.1_lpia.deb
Ubuntu Ubuntu Linux 10.04 powerpc
-
Ubuntu gir1.0-webkit-1.0_1.2.5-0ubuntu0.10.04.1_powerpc.deb
http://ports.ubuntu.com/pool/universe/w/webkit/gir1.0-webkit-1.0_1.2.5 -0ubuntu0.10.04.1_powerpc.deb -
Ubuntu libwebkit-1.0-2-dbg_1.2.5-0ubuntu0.10.04.1_powerpc.deb
http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2-dbg_1.2.5-0 ubuntu0.10.04.1_powerpc.deb -
Ubuntu libwebkit-1.0-2_1.2.5-0ubuntu0.10.04.1_powerpc.deb
http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-1.0-2_1.2.5-0ubun tu0.10.04.1_powerpc.deb -
Ubuntu libwebkit-1.0-common_1.2.5-0ubuntu0.10.04.1_all.deb
http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-com mon_1.2.5-0ubuntu0.10.04.1_all.deb -
Ubuntu libwebkit-dev_1.2.5-0ubuntu0.10.04.1_powerpc.deb
http://ports.ubuntu.com/pool/main/w/webkit/libwebkit-dev_1.2.5-0ubuntu 0.10.04.1_powerpc.deb
Ubuntu Ubuntu Linux 9.10 amd64
-
Ubuntu libwebkit-1.0-2-dbg_1.2.5-0ubuntu0.9.10.1_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-2-d bg_1.2.5-0ubuntu0.9.10.1_amd64.deb -
Ubuntu libwebkit-1.0-2_1.2.5-0ubuntu0.9.10.1_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-2_1 .2.5-0ubuntu0.9.10.1_amd64.deb -
Ubuntu libwebkit-1.0-common_1.2.5-0ubuntu0.9.10.1_all.deb
http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-1.0-com mon_1.2.5-0ubuntu0.9.10.1_all.deb -
Ubuntu libwebkit-dev_1.2.5-0ubuntu0.9.10.1_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/w/webkit/libwebkit-dev_1.2 .5-0ubuntu0.9.10.1_amd64.deb
References
Google Chrome Bidi Algorithm Memory Corruption Vulnerability
References:
References:
- Google Chrome 5.0.375.99 has been released to the Stable channel on Linux, Mac, (Stable Channel Update)
- Google Chrome Homepage (Google)
- webkit 1.2.5 security update tracking bug (Ubuntu)
- Webkit Homepage (Webkit)