Description
WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, does not properly handle large text areas, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted HTML document.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | webkitgtk +2 | 1.2.6-2.el6_0 | RHSA-2011:0177 |
Advisories 1
- RHSA-2011:0177 Red Hat Security Advisory: webkitgtk security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- MDVSA-2011:039 vendor-advisory
- FEDORA-2011-0121 vendor-advisory
- http://code.google.com/p/chromium/issues/detail?id=55257
- http://googlechromereleases.blogspot.com/2010/11/stable-channel-update.html
- ADV-2011-0216 vdb-entry
- 42109 third-party-advisory
- 43086 third-party-advisory
- 45719 vdb-entry
- oval:org.mitre.oval:def:12157 vdb-entry signature
- RHSA-2011:0177 vendor-advisory
- ADV-2011-0552 vdb-entry
- https://bugzilla.redhat.com/show_bug.cgi?id=656118
- https://bugs.webkit.org/show_bug.cgi?id=45611