SB2010092905 - Input validation error in webkit (Alpine package)
Published: September 29, 2010
Security Bulletin ID
SB2010092905
Severity
Medium
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Data manipulation
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Input validation error (CVE-ID: CVE-2010-3115)
The vulnerability allows a remote non-authenticated attacker to manipulate data.
Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6, does not properly implement the history feature, which might allow remote attackers to spoof the address bar via unspecified vectors.
Remediation
Install update from vendor's website.