Lucene search

K
ubuntuUbuntuUSN-676-1
HistoryNov 24, 2008 - 12:00 a.m.

WebKit vulnerability

2008-11-2400:00:00
ubuntu.com
22

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

6.7 Medium

AI Score

Confidence

Low

0.058 Low

EPSS

Percentile

93.4%

Releases

  • Ubuntu 8.10

Packages

  • webkit -

Details

It was discovered that WebKit did not properly handle Cascading Style Sheets
(CSS) import statements. If a user were tricked into opening a malicious
website, an attacker could cause a browser crash and possibly execute
arbitrary code with user privileges.

OSVersionArchitecturePackageVersionFilename
Ubuntu8.10noarchlibwebkit-1.0-1< 1.0.1-2ubuntu0.1UNKNOWN
Ubuntu8.10noarchlibwebkit-1.0-1< dbg-1.0.1-2ubuntu0.1UNKNOWN

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

6.7 Medium

AI Score

Confidence

Low

0.058 Low

EPSS

Percentile

93.4%