Candidate: CVE-2010-1823
PublicDate: 2010-09-24 19:00:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1823
Description:
 Use-after-free vulnerability in WebKit before r65958, as used in Google
 Chrome before 6.0.472.59, allows remote attackers to cause a denial of
 service or possibly have unspecified other impact via vectors that trigger
 use of document APIs such as document.close during parsing, as demonstrated
 by a Cascading Style Sheets (CSS) file referencing an invalid SVG font, aka
 rdar problem 8442098.
Ubuntu-Description:
Notes:
 jdstrand> qt4-x11 unmaintained upstream (see README.webkit for details)
 jdstrand> webkit is a fork of khtml from kdelibs. kdelibs5 is farther from
  it, while qt4-x11 attempts to unify khtml and webkit.
 mdeslaur> webkitkde is a wrapper around qt4-x11's webkit.
 jdstrand> chromium-browser usually has its own CVEs for its own embedded
  webkit, but adjust it as needed
 mdeslaur> debian lists changeset 65692, but I'm not so sure
Bugs:
 https://bugs.webkit.org/show_bug.cgi?id=44533
Priority: low
Discovered-by:
Assigned-to:
CVSS: 

Patches_webkit:
 upstream: http://trac.webkit.org/changeset/65692
 upstream: http://trac.webkit.org/changeset/65958
 upstream: http://trac.webkit.org/changeset/65976
upstream_webkit: released (1.3.3)
dapper_webkit: DNE
hardy_webkit: ignored (reached end-of-life)
jaunty_webkit: ignored (reached end-of-life)
karmic_webkit: ignored (reached end-of-life)
lucid_webkit: ignored (reached end-of-life)
maverick_webkit: ignored (reached end-of-life)
natty_webkit: not-affected
oneiric_webkit: not-affected
precise_webkit: not-affected
quantal_webkit: not-affected
raring_webkit: not-affected
devel_webkit: not-affected

Patches_qt4-x11:
upstream_qt4-x11: needs-triage
dapper_qt4-x11: not-affected (no webkit)
hardy_qt4-x11: not-affected (no webkit)
jaunty_qt4-x11: ignored (reached end-of-life)
karmic_qt4-x11: ignored (reached end-of-life)
lucid_qt4-x11: ignored (see notes)
maverick_qt4-x11: not-affected (webkit isn't built)
natty_qt4-x11: not-affected (webkit isn't built)
oneiric_qt4-x11: not-affected (webkit isn't built)
precise_qt4-x11: not-affected (webkit isn't built)
quantal_qt4-x11: not-affected (webkit isn't built)
raring_qt4-x11: not-affected (webkit isn't built)
devel_qt4-x11: not-affected (webkit isn't built)

Patches_chromium-browser:
upstream_chromium-browser: needs-triage
dapper_chromium-browser: DNE
hardy_chromium-browser: DNE
jaunty_chromium-browser: DNE
karmic_chromium-browser: DNE
lucid_chromium-browser: released (6.0.472.62~r59676-0ubuntu0.10.04.1)
maverick_chromium-browser: not-affected (6.0.472.63~r59945-0ubuntu1)
natty_chromium-browser: not-affected (6.0.472.63~r59945-0ubuntu1)
oneiric_chromium-browser: not-affected (6.0.472.63~r59945-0ubuntu1)
precise_chromium-browser: not-affected (6.0.472.63~r59945-0ubuntu1)
quantal_chromium-browser: not-affected (6.0.472.63~r59945-0ubuntu1)
raring_chromium-browser: not-affected (6.0.472.63~r59945-0ubuntu1)
devel_chromium-browser: not-affected (6.0.472.63~r59945-0ubuntu1)