WebKit vulnerabilities

2009-09-2300:00:00

ubuntu.com

8.4 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.059 Low

EPSS

Percentile

93.4%

JSON

Releases

Ubuntu 9.04
Ubuntu 8.10

Packages

webkit -

Details

It was discovered that WebKit did not properly handle certain SVGPathList
data structures. If a user were tricked into viewing a malicious website,
an attacker could exploit this to execute arbitrary code with the
privileges of the user invoking the program. (CVE-2009-0945)

Several flaws were discovered in the WebKit browser and JavaScript engines.
If a user were tricked into viewing a malicious website, a remote attacker
could cause a denial of service or possibly execute arbitrary code with the
privileges of the user invoking the program. (CVE-2009-1687, CVE-2009-1690,
CVE-2009-1698, CVE-2009-1711, CVE-2009-1725)

It was discovered that WebKit did not prevent the loading of local Java
applets. If a user were tricked into viewing a malicious website,
an attacker could exploit this to execute arbitrary code with the
privileges of the user invoking the program. (CVE-2009-1712)

OSVersionArchitecturePackageVersionFilename
Ubuntu9.04noarchlibwebkit-1.0-1-dbg< 1.0.1-4ubuntu0.1UNKNOWN
Ubuntu9.04noarchlibwebkit-1.0-1< 1.0.1-4ubuntu0.1UNKNOWN
Ubuntu9.04noarchlibwebkit-dev< 1.0.1-4ubuntu0.1UNKNOWN
Ubuntu8.10noarchlibwebkit-1.0-1-dbg< 1.0.1-2ubuntu0.2UNKNOWN
Ubuntu8.10noarchlibwebkit-1.0-1< 1.0.1-2ubuntu0.2UNKNOWN
Ubuntu8.10noarchlibwebkit-dev< 1.0.1-2ubuntu0.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	9.04	noarch	libwebkit-1.0-1-dbg	< 1.0.1-4ubuntu0.1	UNKNOWN
Ubuntu	9.04	noarch	libwebkit-1.0-1	< 1.0.1-4ubuntu0.1	UNKNOWN
Ubuntu	9.04	noarch	libwebkit-dev	< 1.0.1-4ubuntu0.1	UNKNOWN
Ubuntu	8.10	noarch	libwebkit-1.0-1-dbg	< 1.0.1-2ubuntu0.2	UNKNOWN
Ubuntu	8.10	noarch	libwebkit-1.0-1	< 1.0.1-2ubuntu0.2	UNKNOWN
Ubuntu	8.10	noarch	libwebkit-dev	< 1.0.1-2ubuntu0.2	UNKNOWN