Description
WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, accesses a frame object after this object has been destroyed, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | webkitgtk +2 | 1.2.6-2.el6_0 | RHSA-2011:0177 |
Advisories 1
- RHSA-2011:0177 Red Hat Security Advisory: webkitgtk security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- MDVSA-2011:039 vendor-advisory
- FEDORA-2011-0121 vendor-advisory
- http://googlechromereleases.blogspot.com/2010/11/stable-channel-update.html
- http://code.google.com/p/chromium/issues/detail?id=60238
- ADV-2011-0216 vdb-entry
- 42109 third-party-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=656126
- http://trac.webkit.org/changeset/70517
- oval:org.mitre.oval:def:12174 vdb-entry signature
- 43086 third-party-advisory
- https://bugs.webkit.org/show_bug.cgi?id=48281
- 45718 vdb-entry
- RHSA-2011:0177 vendor-advisory
- ADV-2011-0552 vdb-entry