Webkit SVG Out of Bound Array Denial of Service Vulnerability

Bugtraq ID:	45721
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2010-4206
Remote:	Yes
Local:	No
Published:	Nov 04 2010 12:00AM
Updated:	May 07 2015 05:10PM
Credit:	wushi of team509
Vulnerable:	WebKit Open Source Project WebKit 0 Ubuntu Ubuntu Linux 10.10 powerpc Ubuntu Ubuntu Linux 10.10 i386 Ubuntu Ubuntu Linux 10.10 ARM Ubuntu Ubuntu Linux 10.10 amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 Redhat Enterprise Linux Workstation Optional 6 Redhat Enterprise Linux Workstation 6 Redhat Enterprise Linux Server Optional 6 Redhat Enterprise Linux Server 6 Redhat Enterprise Linux HPC Node Optional 6 Redhat Enterprise Linux Desktop Optional 6 Redhat Enterprise Linux Desktop 6 Mandriva Linux Mandrake 2010.1 x86_64 Mandriva Linux Mandrake 2010.1 Google Chrome 6.0.472 55 Google Chrome 7.0.517.41 Google Chrome 6.0.472.9 Google Chrome 6.0.472.8 Google Chrome 6.0.472.7 Google Chrome 6.0.472.62 Google Chrome 6.0.472.61 Google Chrome 6.0.472.60 Google Chrome 6.0.472.6 Google Chrome 6.0.472.59 Google Chrome 6.0.472.58 Google Chrome 6.0.472.57 Google Chrome 6.0.472.56 Google Chrome 6.0.472.54 Google Chrome 6.0.472.53 Google Chrome 6.0.472.52 Google Chrome 6.0.472.51 Google Chrome 6.0.472.50 Google Chrome 6.0.472.5 Google Chrome 6.0.472.49 Google Chrome 6.0.472.48 Google Chrome 6.0.472.47 Google Chrome 6.0.472.46 Google Chrome 6.0.472.45 Google Chrome 6.0.472.44 Google Chrome 6.0.472.43 Google Chrome 6.0.472.42 Google Chrome 6.0.472.41 Google Chrome 6.0.472.40 Google Chrome 6.0.472.4 Google Chrome 6.0.472.39 Google Chrome 6.0.472.38 Google Chrome 6.0.472.37 Google Chrome 6.0.472.36 Google Chrome 6.0.472.35 Google Chrome 6.0.472.34 Google Chrome 6.0.472.33 Google Chrome 6.0.472.32 Google Chrome 6.0.472.31 Google Chrome 6.0.472.30 Google Chrome 6.0.472.3 Google Chrome 6.0.472.29 Google Chrome 6.0.472.28 Google Chrome 6.0.472.27 Google Chrome 6.0.472.26 Google Chrome 6.0.472.25 Google Chrome 6.0.472.24 Google Chrome 6.0.472.23 Google Chrome 6.0.472.22 Google Chrome 6.0.472.21 Google Chrome 6.0.472.20 Google Chrome 6.0.472.2 Google Chrome 6.0.472.19 Google Chrome 6.0.472.18 Google Chrome 6.0.472.17 Google Chrome 6.0.472.16 Google Chrome 6.0.472.15 Google Chrome 6.0.472.14 Google Chrome 6.0.472.13 Google Chrome 6.0.472.12 Google Chrome 6.0.472.11 Google Chrome 6.0.472.10 Google Chrome 6.0.472.1 Google Chrome 6.0.472.0 Google Chrome 6.0.471.0 Google Chrome 6.0.470.0 Google Chrome 6.0.469.0 Google Chrome 6.0.467.0 Google Chrome 6.0.466.6 Google Chrome 6.0.466.5 Google Chrome 6.0.466.4 Google Chrome 6.0.466.3 Google Chrome 6.0.466.2 Google Chrome 6.0.466.1 Google Chrome 6.0.466.0 Google Chrome 6.0.465.2 Google Chrome 6.0.465.1 Google Chrome 6.0.464.1 Google Chrome 6.0.462.0 Google Chrome 6.0.461.0 Google Chrome 6.0.460.0 Google Chrome 6.0.459.0 Google Chrome 6.0.458.2 Google Chrome 6.0.458.1 Google Chrome 6.0.458.0 Google Chrome 6.0.457.0 Google Chrome 6.0.456.0 Google Chrome 6.0.455.0 Google Chrome 6.0.454.0 Google Chrome 6.0.453.1 Google Chrome 6.0.453.0 Google Chrome 6.0.452.1 Google Chrome 6.0.452.0 Google Chrome 6.0.451.0 Google Chrome 6.0.450.4 Google Chrome 6.0.450.3 Google Chrome 6.0.450.2 Google Chrome 6.0.450.1 Google Chrome 6.0.450.0 Google Chrome 6.0.449.0 Google Chrome 6.0.447.2 Google Chrome 6.0.447.1 Google Chrome 6.0.447.0 Google Chrome 6.0.446.0 Google Chrome 6.0.445.1 Google Chrome 6.0.445.0 Google Chrome 6.0.444.0 Google Chrome 6.0.443.0 Google Chrome 6.0.441.0 Google Chrome 6.0.440.0 Google Chrome 6.0.438.0 Google Chrome 6.0.437.3 Google Chrome 6.0.437.2 Google Chrome 6.0.437.1 Google Chrome 6.0.437.0 Google Chrome 6.0.436.0 Google Chrome 6.0.435.0 Google Chrome 6.0.434.0 Google Chrome 6.0.433.0 Google Chrome 6.0.432.0 Google Chrome 6.0.431.0 Google Chrome 6.0.430.0 Google Chrome 6.0.428.0 Google Chrome 6.0.427.0 Google Chrome 6.0.426.0 Google Chrome 6.0.425.0 Google Chrome 6.0.424.0 Google Chrome 6.0.423.0 Google Chrome 6.0.422.0 Google Chrome 6.0.421.0 Google Chrome 6.0.419.0 Google Chrome 6.0.418.9 Google Chrome 6.0.418.8 Google Chrome 6.0.418.7 Google Chrome 6.0.418.6 Google Chrome 6.0.418.5 Google Chrome 6.0.418.4 Google Chrome 6.0.418.3 Google Chrome 6.0.418.2 Google Chrome 6.0.418.1 Google Chrome 6.0.418.0 Google Chrome 6.0.417.0 Google Chrome 6.0.416.1 Google Chrome 6.0.416.0 Google Chrome 6.0.415.1 Google Chrome 6.0.415.0 Google Chrome 6.0.414.0 Google Chrome 6.0.413.0 Google Chrome 6.0.412.0 Google Chrome 6.0.411.0 Google Chrome 6.0.410.0 Google Chrome 6.0.409.0 Google Chrome 6.0.408.9 Google Chrome 6.0.408.8 Google Chrome 6.0.408.7 Google Chrome 6.0.408.6 Google Chrome 6.0.408.5 Google Chrome 6.0.408.4 Google Chrome 6.0.408.3 Google Chrome 6.0.408.2 Google Chrome 6.0.408.10 Google Chrome 6.0.408.1 Google Chrome 6.0.408.0 Google Chrome 6.0.407.0 Google Chrome 6.0.406.0 Google Chrome 6.0.405.0 Google Chrome 6.0.404.2 Google Chrome 6.0.404.1 Google Chrome 6.0.404.0 Google Chrome 6.0.403.0 Google Chrome 6.0.401.1 Google Chrome 6.0.401.0 Google Chrome 6.0.400.0 Google Chrome 6.0.399.0 Google Chrome 6.0.398.0 Google Chrome 6.0.397.0 Gentoo Linux
Not Vulnerable:	Google Chrome 7.0.517.44

Webkit SVG Out of Bound Array Denial of Service Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Webkit SVG Out of Bound Array Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for more information.

Webkit SVG Out of Bound Array Denial of Service Vulnerability

References:

• Stable Channel Update Thursday, November 4, 2010 | 08:31 (Google)
  
• Webkit Homepage (WebKit)