Your submission was sent successfully! Close

You have successfully unsubscribed! Close

Thank you for signing up for our newsletter!
In these regular emails you will find the latest updates about Ubuntu and upcoming events where you can meet our team.Close

CVE-2009-1703

Published: 10 June 2009

WebKit in Apple Safari before 4.0 does not prevent references to file: URLs within (1) audio and (2) video elements, which allows remote attackers to determine the existence of arbitrary files via a crafted HTML document.

Notes

AuthorNote
jdstrand
webkit is a fork of khtml from kdelibs. kdelibs5 is farther from
it, while qt4-x11 attempts to unify khtml and webkit
mdeslaur
code does not appear present in kde4libs
code is different in webkit hardy-jaunty, need to test
code is different in qt4-x11 intrepid-jaunty, need to test

Priority

Low

Status

Package Release Status
qt4-x11
Launchpad, Ubuntu, Debian
dapper Not vulnerable
(no webkit)
hardy Not vulnerable
(no webkit)
intrepid Ignored
(end of life, was needs-triage)
jaunty Ignored
(end of life)
karmic Not vulnerable
(4.5.2-0ubuntu5)
lucid Not vulnerable
(4.5.2-0ubuntu5)
maverick Not vulnerable
(4.5.2-0ubuntu5)
natty Not vulnerable
(4.5.2-0ubuntu5)
upstream Needs triage

webkit
Launchpad, Ubuntu, Debian
dapper Does not exist

hardy Ignored
(end of life)
intrepid Ignored
(end of life, was needs-triage)
jaunty Ignored
(end of life)
karmic Not vulnerable
(1.1.12-1ubuntu1)
lucid Not vulnerable
(1.1.12-1ubuntu1)
maverick Not vulnerable
(1.1.12-1ubuntu1)
natty Not vulnerable
(1.1.12-1ubuntu1)
upstream Needs triage

Patches:
upstream: http://trac.webkit.org/changeset/42533