Webkit Frame Object Denial of Service Vulnerability

Bugtraq ID:	45718
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2010-4204
Remote:	Yes
Local:	No
Published:	Nov 04 2010 12:00AM
Updated:	Apr 16 2015 05:50PM
Credit:	gundlach
Vulnerable:	WebKit Open Source Project WebKit 0 Ubuntu Ubuntu Linux 10.10 powerpc Ubuntu Ubuntu Linux 10.10 i386 Ubuntu Ubuntu Linux 10.10 ARM Ubuntu Ubuntu Linux 10.10 amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 Red Hat Enterprise Linux Workstation Optional 6 Red Hat Enterprise Linux Workstation 6 Red Hat Enterprise Linux Server Optional 6 Red Hat Enterprise Linux Server 6 Red Hat Enterprise Linux HPC Node Optional 6 Red Hat Enterprise Linux Desktop Optional 6 Red Hat Enterprise Linux Desktop 6 Mandriva Linux Mandrake 2010.1 x86_64 Mandriva Linux Mandrake 2010.1 Google Chrome 6.0.472 55 Google Chrome 7.0.517.41 Google Chrome 6.0.472.9 Google Chrome 6.0.472.8 Google Chrome 6.0.472.7 Google Chrome 6.0.472.62 Google Chrome 6.0.472.61 Google Chrome 6.0.472.60 Google Chrome 6.0.472.6 Google Chrome 6.0.472.59 Google Chrome 6.0.472.58 Google Chrome 6.0.472.57 Google Chrome 6.0.472.56 Google Chrome 6.0.472.54 Google Chrome 6.0.472.53 Google Chrome 6.0.472.52 Google Chrome 6.0.472.51 Google Chrome 6.0.472.50 Google Chrome 6.0.472.5 Google Chrome 6.0.472.49 Google Chrome 6.0.472.48 Google Chrome 6.0.472.47 Google Chrome 6.0.472.46 Google Chrome 6.0.472.45 Google Chrome 6.0.472.44 Google Chrome 6.0.472.43 Google Chrome 6.0.472.42 Google Chrome 6.0.472.41 Google Chrome 6.0.472.40 Google Chrome 6.0.472.4 Google Chrome 6.0.472.39 Google Chrome 6.0.472.38 Google Chrome 6.0.472.37 Google Chrome 6.0.472.36 Google Chrome 6.0.472.35 Google Chrome 6.0.472.34 Google Chrome 6.0.472.33 Google Chrome 6.0.472.32 Google Chrome 6.0.472.31 Google Chrome 6.0.472.30 Google Chrome 6.0.472.3 Google Chrome 6.0.472.29 Google Chrome 6.0.472.28 Google Chrome 6.0.472.27 Google Chrome 6.0.472.26 Google Chrome 6.0.472.25 Google Chrome 6.0.472.24 Google Chrome 6.0.472.23 Google Chrome 6.0.472.22 Google Chrome 6.0.472.21 Google Chrome 6.0.472.20 Google Chrome 6.0.472.2 Google Chrome 6.0.472.19 Google Chrome 6.0.472.18 Google Chrome 6.0.472.17 Google Chrome 6.0.472.16 Google Chrome 6.0.472.15 Google Chrome 6.0.472.14 Google Chrome 6.0.472.13 Google Chrome 6.0.472.12 Google Chrome 6.0.472.11 Google Chrome 6.0.472.10 Google Chrome 6.0.472.1 Google Chrome 6.0.472.0 Google Chrome 6.0.471.0 Google Chrome 6.0.470.0 Google Chrome 6.0.469.0 Google Chrome 6.0.467.0 Google Chrome 6.0.466.6 Google Chrome 6.0.466.5 Google Chrome 6.0.466.4 Google Chrome 6.0.466.3 Google Chrome 6.0.466.2 Google Chrome 6.0.466.1 Google Chrome 6.0.466.0 Google Chrome 6.0.465.2 Google Chrome 6.0.465.1 Google Chrome 6.0.464.1 Google Chrome 6.0.462.0 Google Chrome 6.0.461.0 Google Chrome 6.0.460.0 Google Chrome 6.0.459.0 Google Chrome 6.0.458.2 Google Chrome 6.0.458.1 Google Chrome 6.0.458.0 Google Chrome 6.0.457.0 Google Chrome 6.0.456.0 Google Chrome 6.0.455.0 Google Chrome 6.0.454.0 Google Chrome 6.0.453.1 Google Chrome 6.0.453.0 Google Chrome 6.0.452.1 Google Chrome 6.0.452.0 Google Chrome 6.0.451.0 Google Chrome 6.0.450.4 Google Chrome 6.0.450.3 Google Chrome 6.0.450.2 Google Chrome 6.0.450.1 Google Chrome 6.0.450.0 Google Chrome 6.0.449.0 Google Chrome 6.0.447.2 Google Chrome 6.0.447.1 Google Chrome 6.0.447.0 Google Chrome 6.0.446.0 Google Chrome 6.0.445.1 Google Chrome 6.0.445.0 Google Chrome 6.0.444.0 Google Chrome 6.0.443.0 Google Chrome 6.0.441.0 Google Chrome 6.0.440.0 Google Chrome 6.0.438.0 Google Chrome 6.0.437.3 Google Chrome 6.0.437.2 Google Chrome 6.0.437.1 Google Chrome 6.0.437.0 Google Chrome 6.0.436.0 Google Chrome 6.0.435.0 Google Chrome 6.0.434.0 Google Chrome 6.0.433.0 Google Chrome 6.0.432.0 Google Chrome 6.0.431.0 Google Chrome 6.0.430.0 Google Chrome 6.0.428.0 Google Chrome 6.0.427.0 Google Chrome 6.0.426.0 Google Chrome 6.0.425.0 Google Chrome 6.0.424.0 Google Chrome 6.0.423.0 Google Chrome 6.0.422.0 Google Chrome 6.0.421.0 Google Chrome 6.0.419.0 Google Chrome 6.0.418.9 Google Chrome 6.0.418.8 Google Chrome 6.0.418.7 Google Chrome 6.0.418.6 Google Chrome 6.0.418.5 Google Chrome 6.0.418.4 Google Chrome 6.0.418.3 Google Chrome 6.0.418.2 Google Chrome 6.0.418.1 Google Chrome 6.0.418.0 Google Chrome 6.0.417.0 Google Chrome 6.0.416.1 Google Chrome 6.0.416.0 Google Chrome 6.0.415.1 Google Chrome 6.0.415.0 Google Chrome 6.0.414.0 Google Chrome 6.0.413.0 Google Chrome 6.0.412.0 Google Chrome 6.0.411.0 Google Chrome 6.0.410.0 Google Chrome 6.0.409.0 Google Chrome 6.0.408.9 Google Chrome 6.0.408.8 Google Chrome 6.0.408.7 Google Chrome 6.0.408.6 Google Chrome 6.0.408.5 Google Chrome 6.0.408.4 Google Chrome 6.0.408.3 Google Chrome 6.0.408.2 Google Chrome 6.0.408.10 Google Chrome 6.0.408.1 Google Chrome 6.0.408.0 Google Chrome 6.0.407.0 Google Chrome 6.0.406.0 Google Chrome 6.0.405.0 Google Chrome 6.0.404.2 Google Chrome 6.0.404.1 Google Chrome 6.0.404.0 Google Chrome 6.0.403.0 Google Chrome 6.0.401.1 Google Chrome 6.0.401.0 Google Chrome 6.0.400.0 Google Chrome 6.0.399.0 Google Chrome 6.0.398.0 Google Chrome 6.0.397.0 Gentoo Linux
Not Vulnerable:	Google Chrome 7.0.517.44

Webkit Frame Object Denial of Service Vulnerability

Webkit is prone to a denial-of-service vulnerability.

Attackers can exploit this issue to crash the affected application denying service to legitimate users.

This issue was previously discussed in BID 44646 (Google Chrome prior to 7.0.517.44 Multiple Security Vulnerabilities) but has been given its own record to better document it.

Webkit Frame Object Denial of Service Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Webkit Frame Object Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for more information.

Webkit Frame Object Denial of Service Vulnerability

References:

• Stable Channel Update Thursday, November 4, 2010 | 08:31 (Google)
  
• Webkit Homepage (Webkit)