CVE-2010-3259
Published: 7 September 2010
WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 6.0.472.53, and webkitgtk before 1.2.6, does not properly restrict read access to images derived from CANVAS elements, which allows remote attackers to bypass the Same Origin Policy and obtain potentially sensitive image data via a crafted web site.
Notes
| Author | Note |
|---|---|
| jdstrand | qt4-x11 unmaintained upstream (see README.webkit for details) webkit is a fork of khtml from kdelibs. kdelibs5 is farther from it, while qt4-x11 attempts to unify khtml and webkit. |
| mdeslaur | webkitkde is a wrapper around qt4-x11's webkit. |
Priority
Status
| Package | Release | Status |
|---|---|---|
|
chromium-browser Launchpad, Ubuntu, Debian |
dapper |
Does not exist
|
| hardy |
Does not exist
|
|
| jaunty |
Does not exist
|
|
| karmic |
Does not exist
|
|
| lucid |
Released
(6.0.472.53~r57914-0ubuntu0.10.04.1)
|
|
| maverick |
Not vulnerable
(6.0.472.53~r57914-0ubuntu1)
|
|
| natty |
Not vulnerable
(6.0.472.53~r57914-0ubuntu1)
|
|
| oneiric |
Not vulnerable
(6.0.472.53~r57914-0ubuntu1)
|
|
| upstream |
Released
(6.0.472.53)
|
|
|
qt4-x11 Launchpad, Ubuntu, Debian |
dapper |
Not vulnerable
(no webkit)
|
| hardy |
Not vulnerable
(no webkit)
|
|
| jaunty |
Ignored
(end of life)
|
|
| karmic |
Ignored
(end of life)
|
|
| lucid |
Ignored
(end of life)
|
|
| maverick |
Not vulnerable
(webkit isn't built)
|
|
| natty |
Not vulnerable
(webkit isn't built)
|
|
| oneiric |
Not vulnerable
(webkit isn't built)
|
|
| upstream |
Needs triage
|
|
|
webkit Launchpad, Ubuntu, Debian |
dapper |
Does not exist
|
| hardy |
Ignored
(end of life)
|
|
| jaunty |
Ignored
(end of life)
|
|
| karmic |
Released
(1.2.5-0ubuntu0.9.10.1)
|
|
| lucid |
Released
(1.2.5-0ubuntu0.10.04.1)
|
|
| maverick |
Released
(1.2.5-0ubuntu0.10.10.1)
|
|
| natty |
Not vulnerable
(1.2.5-0ubuntu2)
|
|
| oneiric |
Not vulnerable
(1.2.5-0ubuntu2)
|
|
| upstream |
Released
(1.2.5)
|
|
|
Patches: upstream: http://trac.webkit.org/changeset/65826 |
||