RETIRED: WebKit Multiple Unspecified Memory Corruption Vulnerabilities
BID:59939
Info
RETIRED: WebKit Multiple Unspecified Memory Corruption Vulnerabilities
| Bugtraq ID: | 59939 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | May 16 2013 12:00AM |
| Updated: | May 17 2013 12:03PM |
| Credit: | Jay Civelli of the Chromium development community, David German of Google, Fermin J. Serna, Martin Barbella, and Inferno of Google Chrome Security Team, Vitaliy Toropov working with HP TippingPoint's Zero Day Initiative, pa_kt working with HP TippingPoint' |
| Vulnerable: |
WebKit Open Source Project WebKit 1.2.5 WebKit Open Source Project WebKit 1.2.3 WebKit Open Source Project WebKit 1.2.2 WebKit Open Source Project WebKit 0 Apple iTunes 10.5.1 Apple iTunes 10.6 Apple iTunes 10.5 Apple iTunes 10.2.2 Apple iTunes 10.2 Apple iTunes 10.1 Apple iTunes 10 |
| Not Vulnerable: | |
Discussion
RETIRED: WebKit Multiple Unspecified Memory Corruption Vulnerabilities
WebKit is prone to multiple unspecified memory-corruption vulnerabilities.
An attacker may exploit these issues by enticing victims into viewing a malicious webpage.
Successful exploits may allow attackers to execute arbitrary code in the context of the affected browser or cause denial-of-service conditions; other attacks may also be possible.
This BID is being retired. The following individual records exist to better document the issues:
59976 WebKit CVE-2013-1010 Unspecified Memory Corruption Vulnerability
59977 WebKit CVE-2013-1008 Unspecified Memory Corruption Vulnerability
59974 WebKit CVE-2013-1011 Unspecified Memory Corruption Vulnerability
59970 WebKit CVE-2013-1007 Unspecified Memory Corruption Vulnerability
59972 WebKit CVE-2013-1005 Unspecified Memory Corruption Vulnerability
59973 WebKit CVE-2013-1006 Unspecified Memory Corruption Vulnerability
59971 WebKit CVE-2013-1004 Unspecified Memory Corruption Vulnerability
59967 WebKit CVE-2013-1003 Unspecified Memory Corruption Vulnerability
59965 WebKit CVE-2013-1002 Unspecified Memory Corruption Vulnerability
59964 WebKit CVE-2013-1001 Unspecified Memory Corruption Vulnerability
59963 WebKit CVE-2013-1000 Unspecified Memory Corruption Vulnerability
59960 WebKit CVE-2013-0999 Unspecified Memory Corruption Vulnerability
59959 WebKit CVE-2013-0998 Unspecified Memory Corruption Vulnerability
59958 WebKit CVE-2013-0997 Unspecified Memory Corruption Vulnerability
59957 WebKit CVE-2013-0996 Unspecified Memory Corruption Vulnerability
59956 WebKit CVE-2013-0995 Unspecified Memory Corruption Vulnerability
59955 WebKit CVE-2013-0994 Unspecified Memory Corruption Vulnerability
59954 WebKit CVE-2013-0993 Unspecified Memory Corruption Vulnerability
59953 WebKit CVE-2013-0992 Unspecified Memory Corruption Vulnerability
59944 WebKit CVE-2013-0991 Unspecified Memory Corruption Vulnerability
WebKit is prone to multiple unspecified memory-corruption vulnerabilities.
An attacker may exploit these issues by enticing victims into viewing a malicious webpage.
Successful exploits may allow attackers to execute arbitrary code in the context of the affected browser or cause denial-of-service conditions; other attacks may also be possible.
This BID is being retired. The following individual records exist to better document the issues:
59976 WebKit CVE-2013-1010 Unspecified Memory Corruption Vulnerability
59977 WebKit CVE-2013-1008 Unspecified Memory Corruption Vulnerability
59974 WebKit CVE-2013-1011 Unspecified Memory Corruption Vulnerability
59970 WebKit CVE-2013-1007 Unspecified Memory Corruption Vulnerability
59972 WebKit CVE-2013-1005 Unspecified Memory Corruption Vulnerability
59973 WebKit CVE-2013-1006 Unspecified Memory Corruption Vulnerability
59971 WebKit CVE-2013-1004 Unspecified Memory Corruption Vulnerability
59967 WebKit CVE-2013-1003 Unspecified Memory Corruption Vulnerability
59965 WebKit CVE-2013-1002 Unspecified Memory Corruption Vulnerability
59964 WebKit CVE-2013-1001 Unspecified Memory Corruption Vulnerability
59963 WebKit CVE-2013-1000 Unspecified Memory Corruption Vulnerability
59960 WebKit CVE-2013-0999 Unspecified Memory Corruption Vulnerability
59959 WebKit CVE-2013-0998 Unspecified Memory Corruption Vulnerability
59958 WebKit CVE-2013-0997 Unspecified Memory Corruption Vulnerability
59957 WebKit CVE-2013-0996 Unspecified Memory Corruption Vulnerability
59956 WebKit CVE-2013-0995 Unspecified Memory Corruption Vulnerability
59955 WebKit CVE-2013-0994 Unspecified Memory Corruption Vulnerability
59954 WebKit CVE-2013-0993 Unspecified Memory Corruption Vulnerability
59953 WebKit CVE-2013-0992 Unspecified Memory Corruption Vulnerability
59944 WebKit CVE-2013-0991 Unspecified Memory Corruption Vulnerability
Exploit / POC
RETIRED: WebKit Multiple Unspecified Memory Corruption Vulnerabilities
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Note: To exploit these issues through iTunes, and attacker would need to perform a man-in-the-middle attack first.
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Note: To exploit these issues through iTunes, and attacker would need to perform a man-in-the-middle attack first.
Solution / Fix
RETIRED: WebKit Multiple Unspecified Memory Corruption Vulnerabilities
Solution:
Apple has released updates to address these issues for iTunes. Updates for other applications utilizing WebKit are not yet known to be available.
Solution:
Apple has released updates to address these issues for iTunes. Updates for other applications utilizing WebKit are not yet known to be available.
References
WebKit Multiple Unspecified Memory Corruption Vulnerabilities
References:
References:
- iTunes Homepage (Apple)
- Webkit Homepage (Webkit)