WebKit style Processing Memory Corruption Vulnerability

Release date:
Updated on:

Affected Systems:
Apple Safari 5.0.4 for Windows
Apple Safari 5.0.4
Google Chrome
Apple iOS <= 4.2.1
Unaffected system:
Apple Safari 5.0.5 for Windows
Apple Safari 5.0.5
Google Chrome 10.0.648.htm
Apple iOS 4.3.2
Apple iOS 4.2.7
Description:
--------------------------------------------------------------------------------
Bugtraq id: 46849
Cve id: CVE-2011-1290

WebKit is an open-source browser engine. WebKit is also the name of the Apple Mac OS x System engine Framework version. It is mainly used in Safari, Dashboard, Mail, and other Mac OS X programs.

WebKit has a memory corruption vulnerability in processing malformed styles. Remote attackers can exploit this vulnerability to execute arbitrary code in the affected browsers or cause DOS.

<* Source: Vincenzo Iozzo (snagg@securenetwork.it)

Link: http://www.zerodayinitiative.com/advisories/ZDI-11-104/
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Apple
-----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://support.apple.com/