CVE-2010-1760

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
• secunia.com/advisories/41856
• secunia.com/advisories/43068
• security-tracker.debian.org/tracker/CVE-2010-1760
• trac.webkit.org/changeset/58409
• mandriva.com/security/advisories
• securityfocus.com/bid/42494
• ubuntu.com/usn/USN-1006-1
• vupen.com/english/advisories/2010/2722
• vupen.com/english/advisories/2011/0212
• vupen.com/english/advisories/2011/0552
• bugs.webkit.org/show_bug.cgi

webkit のその他の脆弱性

• CVE-2010-1386緊急 10.0page/Geolocation.cpp in WebCore in WebKit before r56188 and before 1.2.5 does not properly restrict access to the lastPosition function, whi…
• CVE-2010-0661中 6.8WebCore/bindings/v8/custom/V8DOMWindowCustom.cpp in WebKit before r52401, as used in Google Chrome before 4.0.249.78, allows remote attacker…
• CVE-2010-0659緊急 9.3The image decoder in WebKit before r52833, as used in Google Chrome before 4.0.249.78, does not properly handle a failure of memory allocati…
• CVE-2010-0656中 4.3WebKit before r51295, as used in Google Chrome before 4.0.249.78, presents a directory-listing page in response to an XMLHttpRequest for a f…
• CVE-2010-0651中 4.3WebKit before r52784, as used in Google Chrome before 4.0.249.78 and Apple Safari before 4.0.5, permits cross-origin loading of CSS styleshe…