CVE-2010-3812
Fixed in a distro release EPSS 7%
Integer overflow in the Text::wholeText method in dom/Text.cpp in WebKit, as used in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4; webkitgtk before 1.2.6; and possibly other products allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving Text objects.
Products: apple safari, apple webkit
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 6 | webkitgtk | 0:1.2.6-2.el6_0 |
| Red Hat Enterprise Linux 6 | webkitgtk-debuginfo | 0:1.2.6-2.el6_0 |
| Red Hat Enterprise Linux 6 | webkitgtk-devel | 0:1.2.6-2.el6_0 |
| Red Hat Enterprise Linux 6 | webkitgtk-doc | 0:1.2.6-2.el6_0 |
| Ubuntu 16.04 LTS | qtwebkit-source | no fix |