WebKit Multiple Unspecified Memory Corruption Vulnerabilities
BID:55534
Info
WebKit Multiple Unspecified Memory Corruption Vulnerabilities
| Bugtraq ID: | 55534 |
| Class: | Unknown |
| CVE: |
CVE-2012-3601 CVE-2012-3602 CVE-2012-3606 CVE-2012-3607 CVE-2012-3612 CVE-2012-3613 CVE-2012-3614 CVE-2012-3616 CVE-2012-3617 CVE-2012-3621 CVE-2012-3622 CVE-2012-3623 CVE-2012-3624 CVE-2012-3632 CVE-2012-3643 CVE-2012-3647 CVE-2012-3648 CVE-2012-3649 CVE-2012-3651 CVE-2012-3652 CVE-2012-3654 CVE-2012-3657 CVE-2012-3658 CVE-2012-3659 CVE-2012-3660 CVE-2012-3671 CVE-2012-3672 CVE-2012-3673 CVE-2012-3675 CVE-2012-3676 CVE-2012-3677 CVE-2012-3684 CVE-2012-3685 CVE-2012-3687 CVE-2012-3688 CVE-2012-3692 CVE-2012-3699 CVE-2012-3700 CVE-2012-3701 CVE-2012-3702 CVE-2012-3703 CVE-2012-3704 CVE-2012-3705 CVE-2012-3706 CVE-2012-3707 CVE-2012-3708 CVE-2012-3709 CVE-2012-3710 CVE-2012-3711 CVE-2012-3712 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 12 2012 12:00AM |
| Updated: | Jan 28 2013 09:00PM |
| Credit: | Martin Barbella of the Google Chrome Security Team, miaubiz, Abhishek Arya of the Google Chrome Security Team, Skylined of the Google Chrome Security Team, Yong Li of Research In Motion, Apple Product Security, Dominic Cooney of Google, Apple, Mario Gomes |
| Vulnerable: |
WebKit Open Source Project WebKit 1.2.5 WebKit Open Source Project WebKit 1.2.3 WebKit Open Source Project WebKit 1.2.2 WebKit Open Source Project WebKit r82222 WebKit Open Source Project WebKit r77705 WebKit Open Source Project WebKit r52833 WebKit Open Source Project WebKit r52401 WebKit Open Source Project WebKit r51295 WebKit Open Source Project WebKit r38566 WebKit Open Source Project WebKit r105591 WebKit Open Source Project WebKit 2 WebKit Open Source Project WebKit 0 Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Apple Safari 5.1.7 Apple Safari 5.1.4 Apple Safari 5.1.1 Apple Safari 5.1 Apple iTunes 10.5.1 Apple iTunes 10.6 Apple iTunes 10.5 Apple iTunes 10.2 Apple iTunes 10.1 Apple iTunes 10 Apple iOS 5.1.1 Apple iOS 5.1 Apple iOS 5.0.1 Apple iOS 5 Apple iOS 4.3.5 Apple iOS 4.3 Apple iOS 4.2 Apple iOS 4.1 Apple iOS 4 Apple iOS 3.2 Apple iOS 3.1 Apple iOS 3.0 Apple iOS 2.1 Apple iOS 2.0 |
| Not Vulnerable: | |
Discussion
WebKit Multiple Unspecified Memory Corruption Vulnerabilities
WebKit is prone to multiple unspecified memory-corruption vulnerabilities.
An attacker can exploit these issues by enticing an unsuspecting user into visiting a malicious webpage with a vulnerable application.
Few technical details are currently available. We will update this BID when more information emerges.
Successful exploits will allow attackers to execute arbitrary code in the context of the affected browser or cause denial-of-service conditions; other attacks may also be possible.
WebKit is prone to multiple unspecified memory-corruption vulnerabilities.
An attacker can exploit these issues by enticing an unsuspecting user into visiting a malicious webpage with a vulnerable application.
Few technical details are currently available. We will update this BID when more information emerges.
Successful exploits will allow attackers to execute arbitrary code in the context of the affected browser or cause denial-of-service conditions; other attacks may also be possible.
Solution / Fix
WebKit Multiple Unspecified Memory Corruption Vulnerabilities
Solution:
Apple has released updates to address these issues for iTunes. Updates for other applications utilizing WebKit are not yet known to be available.
Apple iTunes 10.6
Apple iTunes 10.6.1.7
Apple iTunes 10.5.1
Apple iTunes 10.6.3
Solution:
Apple has released updates to address these issues for iTunes. Updates for other applications utilizing WebKit are not yet known to be available.
Apple iTunes 10.6
-
Apple APPLE-SA-2012-09-12-1-iTunes64Setup.exe
For 64-bit Windows XP / Vista / Windows 7
http://www.apple.com/itunes/download/ -
Apple APPLE-SA-2012-09-12-1-iTunesSetup.exe
For Windows XP / Vista / Windows 7
http://www.apple.com/itunes/download/
Apple iTunes 10.6.1.7
-
Apple APPLE-SA-2012-09-12-1-iTunes64Setup.exe
For 64-bit Windows XP / Vista / Windows 7
http://www.apple.com/itunes/download/ -
Apple APPLE-SA-2012-09-12-1-iTunesSetup.exe
For Windows XP / Vista / Windows 7
http://www.apple.com/itunes/download/
Apple iTunes 10.5.1
-
Apple APPLE-SA-2012-09-12-1-iTunes64Setup.exe
For 64-bit Windows XP / Vista / Windows 7
http://www.apple.com/itunes/download/ -
Apple APPLE-SA-2012-09-12-1-iTunesSetup.exe
For Windows XP / Vista / Windows 7
http://www.apple.com/itunes/download/
Apple iTunes 10.6.3
-
Apple APPLE-SA-2012-09-12-1-iTunes64Setup.exe
For 64-bit Windows XP / Vista / Windows 7
http://www.apple.com/itunes/download/ -
Apple APPLE-SA-2012-09-12-1-iTunesSetup.exe
For Windows XP / Vista / Windows 7
http://www.apple.com/itunes/download/
References
WebKit Multiple Unspecified Memory Corruption Vulnerabilities
References:
References:
- iTunes Homepage (Apple)
- Webkit Homepage (WebKit)
- About the security content of Safari 6.0.1 (Apple)
- APPLE-SA-2012-09-12-1 iTunes 10.7 (Apple)