Description
Array index error in the FEBlend::apply function in WebCore/platform/graphics/filters/FEBlend.cpp in WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted SVG document, related to effects in the application of filters.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | webkitgtk +2 | 1.2.6-2.el6_0 | RHSA-2011:0177 |
Advisories 1
- RHSA-2011:0177 Red Hat Security Advisory: webkitgtk security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- MDVSA-2011:039 vendor-advisory
- FEDORA-2011-0121 vendor-advisory
- http://trac.webkit.org/changeset/70652
- http://googlechromereleases.blogspot.com/2010/11/stable-channel-update.html
- ADV-2011-0216 vdb-entry
- 42109 third-party-advisory
- http://code.google.com/p/chromium/issues/detail?id=60688
- oval:org.mitre.oval:def:11949 vdb-entry signature
- 43086 third-party-advisory
- https://bugs.webkit.org/show_bug.cgi?id=48371
- 45721 vdb-entry
- RHSA-2011:0177 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=656129
- ADV-2011-0552 vdb-entry