Skip to content
OpenAdvisories
High DSA-2188-1 10 CVEs

webkit - several

Published Mar 10, 2011 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 webkit 1.2.7-0+squeeze1

Vulnerabilities 10

  • High 7.5

    The CSSParser::parseFontFaceSrc function in WebCore/css/CSSParser.cpp in WebKit, as used in Google Chrome before 8.0.55…

  • Unscored —

    WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and w…

  • Unscored —

    The rendering implementation in Google Chrome before 5.0.375.125 allows remote attackers to cause a denial of service (…

  • Unscored —

    Google Chrome before 7.0.517.41 does not properly handle animated GIF images, which allows remote attackers to cause a …

  • Unscored —

    Google Chrome before 7.0.517.44 does not properly perform a cast of an unspecified variable during processing of an SVG…

  • Unscored —

    Use-after-free vulnerability in Google Chrome before 8.0.552.215 allows remote attackers to cause a denial of service o…

  • Unscored —

    Use-after-free vulnerability in Google Chrome before 8.0.552.215 allows remote attackers to cause a denial of service v…

  • Unscored —

    Google Chrome before 8.0.552.224 and Chrome OS before 8.0.552.343 do not properly perform cursor handling, which allows…

  • Unscored —

    Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly perform a cast of an unspecified vari…

  • Unscored —

    Google Chrome before 9.0.597.84 does not properly restrict drag and drop operations, which might allow remote attackers…