Summary
A large number of security issues were discovered in the WebKitGTK+ Web and
JavaScript engines. If a user were tricked into viewing a malicious
website, a remote attacker could exploit a variety of issues related to web
browser security, including cross-site scripting attacks, denial of service
attacks, and arbitrary code execution.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | webkitgtk | 2.4.10-0ubuntu0.14.04.1 |
Vulnerabilities 27
-
Unscored —
The ScrollView::paint function in platform/scroll/ScrollView.cpp in Blink, as used in Google Chrome before 35.0.1916.11…
-
Unscored —
WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execut…
-
Unscored —
WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execut…
-
Unscored —
WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execut…
-
Unscored —
WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execut…
-
Unscored —
WebKit, as used in Apple iOS before 8.3, Apple TV before 7.2, and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x …
-
Unscored —
WebKit, as used in Apple iOS before 8.3, Apple TV before 7.2, and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x …
-
Unscored —
The private-browsing implementation in WebKit in Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5 plac…
-
Unscored —
WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, allows remote attackers to execut…
-
Unscored —
The history implementation in WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, all…
-
Unscored —
The Page Loading functionality in WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7, as used …
-
Unscored —
The SQLite authorizer in the Storage functionality in WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x be…
-
Unscored —
WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7, as used in Apple iOS before 8.4 and other …
-
Unscored —
WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remot…
-
Unscored —
WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remot…
-
Unscored —
WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remot…
-
Unscored —
WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remot…
-
Unscored —
WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remot…
-
Unscored —
WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remot…
-
Unscored —
WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remot…
-
Unscored —
The Content Security Policy implementation in WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0…
-
Unscored —
The WebKit Canvas implementation in Apple iOS before 9 allows remote attackers to bypass the Same Origin Policy and obt…
-
Unscored —
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or caus…
-
Unscored —
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or caus…
-
Unscored —
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or caus…
-
Unscored —
WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbi…
-
Unscored —
WebKit, as used in Apple iOS before 9.1, Safari before 9.0.1, and iTunes before 12.3.1, allows remote attackers to exec…
References
-
report
https://ubuntu.com/security/CVE-2014-1748
-
report
https://ubuntu.com/security/CVE-2015-1071
-
report
https://ubuntu.com/security/CVE-2015-1076
-
report
https://ubuntu.com/security/CVE-2015-1081
-
report
https://ubuntu.com/security/CVE-2015-1083
-
report
https://ubuntu.com/security/CVE-2015-1120
-
report
https://ubuntu.com/security/CVE-2015-1122
-
report
https://ubuntu.com/security/CVE-2015-1127
-
report
https://ubuntu.com/security/CVE-2015-1153
-
report
https://ubuntu.com/security/CVE-2015-1155
-
report
https://ubuntu.com/security/CVE-2015-3658
-
report
https://ubuntu.com/security/CVE-2015-3659
-
report
https://ubuntu.com/security/CVE-2015-3727
-
report
https://ubuntu.com/security/CVE-2015-3731
-
report
https://ubuntu.com/security/CVE-2015-3741
-
report
https://ubuntu.com/security/CVE-2015-3743
-
report
https://ubuntu.com/security/CVE-2015-3745
-
report
https://ubuntu.com/security/CVE-2015-3747
-
report
https://ubuntu.com/security/CVE-2015-3748
-
report
https://ubuntu.com/security/CVE-2015-3749
-
report
https://ubuntu.com/security/CVE-2015-3752
-
report
https://ubuntu.com/security/CVE-2015-5788
-
report
https://ubuntu.com/security/CVE-2015-5794
-
report
https://ubuntu.com/security/CVE-2015-5801
-
report
https://ubuntu.com/security/CVE-2015-5809
-
report
https://ubuntu.com/security/CVE-2015-5822
-
report
https://ubuntu.com/security/CVE-2015-5928