PT-2010-5544 · Google +3 · Chrome Os +4

Name of the Vulnerable Software and Affected Versions: WebKit versions prior to 8.0.552.224 Google Chrome versions prior to 8.0.552.224 Chrome OS versions prior to 8.0.552.343 webkitgtk versions prior to 1.2.6 Description: The CSSParser::parseFontFaceSrc function in WebCore/css/CSSParser.cpp does...

CVE-2010-4577

Removed by vendor...

CVE-2010-4577

The CSSParser::parseFontFaceSrc function in WebCore/css/CSSParser.cpp in WebKit, as used in Google Chrome before 8.0.552.224, Chrome OS before 8.0.552.343, webkitgtk before 1.2.6, and other products does not properly parse Cascading Style Sheets CSS token sequences, which allows remote attackers ...

CVE-2010-3812

Integer overflow in the Text::wholeText method in dom/Text.cpp in WebKit, as used in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4; webkitgtk before 1.2.6; and possibly other products allows remote attackers to execute arbitrary code or cau...

Design/Logic Flaw

The WebCore::HTMLLinkElement::process function in WebCore/html/HTMLLinkElement.cpp in WebKit, as used in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4; webkitgtk before 1.2.6; and possibly other products does not verify whether DNS...

CVE-2010-3813

The WebCore::HTMLLinkElement::process function in WebCore/html/HTMLLinkElement.cpp in WebKit, as used in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4; webkitgtk before 1.2.6; and possibly other products does not verify whether DNS...

UBUNTU-CVE-2010-3812

Integer overflow in the Text::wholeText method in dom/Text.cpp in WebKit, as used in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4; webkitgtk before 1.2.6; and possibly other products allows remote attackers to execute arbitrary code or cau...

CVE-2010-3812

Integer overflow in the Text::wholeText method in dom/Text.cpp in WebKit, as used in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4; webkitgtk before 1.2.6; and possibly other products allows remote attackers to execute arbitrary code or cau...

CVE-2010-3813

Removed by vendor...

CVE-2010-3812

Removed by vendor...

PT-2010-5096

Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 5.0.3 on Mac OS X 10.5 through 10.6 and Windows Apple Safari versions prior to 4.1.3 on Mac OS X 10.4 webkitgtk versions prior to 1.2.6 Description The issue is related to an integer overflow in the Text::wholeTe...

CVE-2010-3813: Undefined Security Weakness

The WebCore::HTMLLinkElement::process function in WebCore/html/HTMLLinkElement.cpp in WebKit, as used in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4; webkitgtk before 1.2.6; and possibly other products does not verify whether DNS...

PT-2010-5097

Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 5.0.3 on Mac OS X 10.5 through 10.6 and Windows Apple Safari versions prior to 4.1.3 on Mac OS X 10.4 webkitgtk versions prior to 1.2.6 Description The issue allows remote attackers to bypass intended access...

CVE-2010-4197

Use-after-free vulnerability in WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving text editing...

CVE-2010-4198

CVE-2010-4198 affects WebKit as used in Google Chrome prior to 7.0.517.44 and webkitgtk prior to 1.2.6; it does not properly handle large text areas, enabling remote memory corruption (and potentially other impact) via a crafted HTML document. Affected products include WebKit/WebKitGTK+ and Chrom...

CVE-2010-4204

Removed by vendor...

CVE-2010-4198: Improper Input Validation

WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, does not properly handle large text areas, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a crafted HTML document...

CVE-2010-4204: Undefined Security Weakness

WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, accesses a frame object after this object has been destroyed, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...

CVE-2010-4197: Use After Free

Use-after-free vulnerability in WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving text editing...

PT-2010-5354

Name of the Vulnerable Software and Affected Versions WebKit versions prior to 7.0.517.44 webkitgtk versions prior to 1.2.6 Google Chrome versions prior to 7.0.517.44 Description The issue is related to an array index error in the FEBlend::apply function, which can be triggered by a crafted SVG...