Homepage

Numeric Errors The advisory has been revoked - it doesn't affect any version of package webkitgtk  (opens in a new tab)

Threat Intelligence

EPSS
11.24% (96th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-UBUNTU1604-WEBKITGTK-662710
  • published10 Sept 2020
  • disclosed22 Nov 2010
Report a new vulnerability Found a mistake?

Introduced: 22 Nov 2010

CVE-2010-3812  (opens in a new tab)
CWE-189  (opens in a new tab)

Amendment

The Ubuntu security team deemed this advisory irrelevant for Ubuntu:16.04.

NVD Description

Note: Versions mentioned in the description apply only to the upstream webkitgtk package and not the webkitgtk package as distributed by Ubuntu.

Integer overflow in the Text::wholeText method in dom/Text.cpp in WebKit, as used in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4; webkitgtk before 1.2.6; and possibly other products allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving Text objects.

References