Launchpad.net

CVE 2010-1386

page/Geolocation.cpp in WebCore in WebKit before r56188 and before 1.2.5 does not properly restrict access to the lastPosition function, which has unspecified impact and remote attack vectors, aka rdar problem 7746357.

Related bugs and status

CVE-2010-1386 (Candidate) is related to these bugs:

Bug #660075: webkit 1.2.5 security update tracking bug

		In	Importance	Status
660075	webkit 1.2.5 security update tracking bug	webkit (Ubuntu)	Undecided	Fix Released
660075	webkit 1.2.5 security update tracking bug	webkit (Ubuntu Karmic)	Medium	Fix Released
660075	webkit 1.2.5 security update tracking bug	webkit (Ubuntu Lucid)	Medium	Fix Released
660075	webkit 1.2.5 security update tracking bug	webkit (Ubuntu Maverick)	Medium	Fix Released

See the

CVE page on Mitre.org for more details.

References

CONFIRM: http://security-tracke...
CONFIRM: http://trac.webkit.org...
CONFIRM: https://bugs.webkit.or...
UBUNTU: USN-1006-1
SECUNIA: 41856
VUPEN: ADV-2010-2722
BID: 42500
SUSE: SUSE-SR:2011:002
SECUNIA: 43068
VUPEN: ADV-2011-0212
MANDRIVA: MDVSA-2011:039
VUPEN: ADV-2011-0552