WebkitGTK+ up to 1.11.90 HTML Render Engine RenderTable.cpp RenderTable::addChild Local Privilege Escalation

Summaryinfo

A vulnerability was found in WebkitGTK+ up to 1.11.90. It has been classified as problematic. Affected by this issue is the function RenderTable::addChild of the file WebCore/rendering/RenderTable.cpp of the component HTML Render Engine. The manipulation leads to an unknown weakness. In addition, an exploit is available. It is recommended to apply a patch to fix this issue.

Detailsinfo

A vulnerability was found in WebkitGTK+ up to 1.11.90 (Web Browser) and classified as problematic. This issue affects the function RenderTable::addChild of the file WebCore/rendering/RenderTable.cpp of the component HTML Render Engine. The impact remains unknown.

The weakness was presented 03/05/2013 as not defined article (Website). It is possible to read the advisory at trac.webkit.org. Technical details as well as a public exploit are known.

It is declared as proof-of-concept.

Applying a patch is able to eliminate this problem. The bugfix is ready for download at trac.webkit.org. A possible mitigation has been published immediately after the disclosure of the vulnerability.

The vulnerability is also documented in the vulnerability database at OSVDB (91116†). See VDB-7944 and VDB-7942 for similar entries. Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Type

• Web Browser

Name

• WebkitGTK+

Version

• 1.11.0
• 1.11.1
• 1.11.2
• 1.11.3
• 1.11.4
• 1.11.5
• 1.11.6
• 1.11.7
• 1.11.8
• 1.11.9
• 1.11.10
• 1.11.11
• 1.11.12
• 1.11.13
• 1.11.14
• 1.11.15
• 1.11.16
• 1.11.17
• 1.11.18
• 1.11.19
• 1.11.20
• 1.11.21
• 1.11.22
• 1.11.23
• 1.11.24
• 1.11.25
• 1.11.26
• 1.11.27
• 1.11.28
• 1.11.29
• 1.11.30
• 1.11.31
• 1.11.32
• 1.11.33
• 1.11.34
• 1.11.35
• 1.11.36
• 1.11.37
• 1.11.38
• 1.11.39
• 1.11.40
• 1.11.41
• 1.11.42
• 1.11.43
• 1.11.44
• 1.11.45
• 1.11.46
• 1.11.47
• 1.11.48
• 1.11.49
• 1.11.50
• 1.11.51
• 1.11.52
• 1.11.53
• 1.11.54
• 1.11.55
• 1.11.56
• 1.11.57
• 1.11.58
• 1.11.59
• 1.11.60
• 1.11.61
• 1.11.62
• 1.11.63
• 1.11.64
• 1.11.65
• 1.11.66
• 1.11.67
• 1.11.68
• 1.11.69
• 1.11.70
• 1.11.71
• 1.11.72
• 1.11.73
• 1.11.74
• 1.11.75
• 1.11.76
• 1.11.77
• 1.11.78
• 1.11.79
• 1.11.80
• 1.11.81
• 1.11.82
• 1.11.83
• 1.11.84
• 1.11.85
• 1.11.86
• 1.11.87
• 1.11.88
• 1.11.89
• 1.11.90

License

• open-source

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion