CVE-2011-1190
Published: 11 March 2011
The Web Workers implementation in Google Chrome before 10.0.648.127 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an "error message leak."
Notes
Author | Note |
---|---|
jdstrand | qt4-x11 unmaintained upstream (see README.webkit for details) |
Priority
Status
Package | Release | Status |
---|---|---|
chromium-browser Launchpad, Ubuntu, Debian |
dapper |
Does not exist
|
hardy |
Does not exist
|
|
karmic |
Does not exist
|
|
lucid |
Released
(3.0.1271.97-0ubuntu0.10.04.1)
|
|
maverick |
Released
(10.0.648.127~r76697-0ubuntu0.10.10.1)
|
|
natty |
Released
(10.0.648.127~r76697-0ubuntu1)
|
|
oneiric |
Released
(3.0.1271.97-0ubuntu0.11.10.1)
|
|
precise |
Released
(3.0.1271.97-0ubuntu0.12.04.1)
|
|
quantal |
Released
(3.0.1271.97-0ubuntu0.12.10.1)
|
|
raring |
Released
(10.0.648.127~r76697-0ubuntu1)
|
|
saucy |
Released
(10.0.648.127~r76697-0ubuntu1)
|
|
trusty |
Released
(10.0.648.127~r76697-0ubuntu1)
|
|
upstream |
Released
(10.0.648.127)
|
|
utopic |
Released
(10.0.648.127~r76697-0ubuntu1)
|
|
vivid |
Released
(10.0.648.127~r76697-0ubuntu1)
|
|
wily |
Released
(10.0.648.127~r76697-0ubuntu1)
|
|
xenial |
Released
(10.0.648.127~r76697-0ubuntu1)
|
|
yakkety |
Released
(10.0.648.127~r76697-0ubuntu1)
|
|
qt4-x11 Launchpad, Ubuntu, Debian |
dapper |
Not vulnerable
(no webkit)
|
hardy |
Not vulnerable
(no webkit)
|
|
karmic |
Ignored
(end of life)
|
|
lucid |
Ignored
(end of life)
|
|
maverick |
Not vulnerable
(webkit isn't built)
|
|
natty |
Not vulnerable
(webkit isn't built)
|
|
oneiric |
Not vulnerable
(webkit isn't built)
|
|
precise |
Not vulnerable
(webkit isn't built)
|
|
quantal |
Not vulnerable
(webkit isn't built)
|
|
raring |
Not vulnerable
(webkit isn't built)
|
|
saucy |
Not vulnerable
(webkit isn't built)
|
|
trusty |
Not vulnerable
(webkit isn't built)
|
|
upstream |
Needs triage
|
|
utopic |
Not vulnerable
(webkit isn't built)
|
|
vivid |
Not vulnerable
(webkit isn't built)
|
|
wily |
Not vulnerable
(webkit isn't built)
|
|
xenial |
Not vulnerable
(webkit isn't built)
|
|
yakkety |
Not vulnerable
(webkit isn't built)
|
|
qtwebkit-source Launchpad, Ubuntu, Debian |
dapper |
Does not exist
|
hardy |
Does not exist
|
|
karmic |
Does not exist
|
|
lucid |
Does not exist
|
|
maverick |
Ignored
(end of life)
|
|
natty |
Ignored
(end of life)
|
|
oneiric |
Ignored
(end of life)
|
|
precise |
Ignored
(end of life)
|
|
quantal |
Ignored
(end of life)
|
|
raring |
Ignored
(end of life)
|
|
saucy |
Ignored
(end of life)
|
|
trusty |
Does not exist
(trusty was ignored [no update available])
|
|
upstream |
Needs triage
|
|
utopic |
Ignored
(end of life)
|
|
vivid |
Ignored
(end of life)
|
|
wily |
Ignored
(end of life)
|
|
xenial |
Ignored
(no update available)
|
|
yakkety |
Ignored
(end of life)
|
|
webkit Launchpad, Ubuntu, Debian |
dapper |
Does not exist
|
hardy |
Ignored
(end of life)
|
|
karmic |
Ignored
(end of life)
|
|
lucid |
Ignored
(end of life)
|
|
maverick |
Ignored
(end of life)
|
|
natty |
Ignored
(end of life)
|
|
oneiric |
Ignored
(end of life)
|
|
precise |
Ignored
(end of life)
|
|
quantal |
Ignored
(end of life)
|
|
raring |
Ignored
(end of life)
|
|
saucy |
Ignored
(end of life)
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
utopic |
Does not exist
|
|
vivid |
Does not exist
|
|
wily |
Does not exist
|
|
xenial |
Does not exist
|
|
yakkety |
Does not exist
|
|
Patches: upstream: http://trac.webkit.org/changeset/77563 |
||
webkitgtk Launchpad, Ubuntu, Debian |
lucid |
Does not exist
|
precise |
Does not exist
|
|
quantal |
Does not exist
|
|
saucy |
Does not exist
|
|
trusty |
Does not exist
(trusty was not-affected [2.4.8-1ubuntu1~ubuntu14.04.1])
|
|
upstream |
Needs triage
|
|
utopic |
Ignored
(end of life)
|
|
vivid |
Ignored
(end of life)
|
|
wily |
Not vulnerable
(2.4.9-2ubuntu2)
|
|
xenial |
Not vulnerable
(2.4.9-2ubuntu2)
|
|
yakkety |
Not vulnerable
(2.4.9-2ubuntu2)
|