Search for packages
Package details: pkg:deb/ubuntu/webkitgtk@2.4.10-0ubuntu0.15.10.1
purl pkg:deb/ubuntu/webkitgtk@2.4.10-0ubuntu0.15.10.1
Next non-vulnerable version 2.4.10-0ubuntu1
Latest non-vulnerable version 2.4.10-0ubuntu1
Risk 10.0
Vulnerabilities affecting this package (26)
Vulnerability Summary Fixed by
VCID-1scq-4ve9-aaag
Aliases:
CVE-2015-3727
WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7, as used in Apple iOS before 8.4 and other products, does not properly restrict rename operations on WebSQL tables, which allows remote attackers to access an arbitrary web site's database via a crafted web site.
2.4.10-0ubuntu1
Affected by 0 other vulnerabilities.
VCID-2r92-t3f5-aaag
Aliases:
CVE-2015-1120
WebKit, as used in Apple iOS before 8.3, Apple TV before 7.2, and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-04-08-1, APPLE-SA-2015-04-08-3, and APPLE-SA-2015-04-08-4.
2.4.10-0ubuntu1
Affected by 0 other vulnerabilities.
VCID-2u1v-dhvp-aaas
Aliases:
CVE-2015-3745
WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.
2.4.10-0ubuntu1
Affected by 0 other vulnerabilities.
VCID-2vay-775q-aaam
Aliases:
CVE-2015-1153
WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2015-1152 and CVE-2015-1154.
2.4.10-0ubuntu1
Affected by 0 other vulnerabilities.
VCID-46f4-w43k-aaas
Aliases:
CVE-2015-3749
WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.
2.4.10-0ubuntu1
Affected by 0 other vulnerabilities.
VCID-4k1m-nw8b-aaab
Aliases:
CVE-2015-5928
WebKit, as used in Apple iOS before 9.1, Safari before 9.0.1, and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-10-21-1, APPLE-SA-2015-10-21-3, and APPLE-SA-2015-10-21-5.
2.4.10-0ubuntu1
Affected by 0 other vulnerabilities.
VCID-4ncp-4xvg-aaab
Aliases:
CVE-2015-3743
WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.
2.4.10-0ubuntu1
Affected by 0 other vulnerabilities.
VCID-9r4j-jee6-aaad
Aliases:
CVE-2015-1155
The history implementation in WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, allows remote attackers to bypass the Same Origin Policy and read arbitrary files via a crafted web site.
2.4.10-0ubuntu1
Affected by 0 other vulnerabilities.
VCID-ay9a-3aaq-aaae
Aliases:
CVE-2015-5809
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.
2.4.10-0ubuntu1
Affected by 0 other vulnerabilities.
VCID-bgau-5pgw-aaaq
Aliases:
CVE-2015-1127
The private-browsing implementation in WebKit in Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5 places browsing history into an index, which might allow local users to obtain sensitive information by reading index entries.
2.4.10-0ubuntu1
Affected by 0 other vulnerabilities.
VCID-c7z6-wag5-aaaq
Aliases:
CVE-2015-3659
The SQLite authorizer in the Storage functionality in WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7, as used in Apple iOS before 8.4 and other products, does not properly restrict access to SQL functions, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted web site.
2.4.10-0ubuntu1
Affected by 0 other vulnerabilities.
VCID-dn9p-m64n-aaac
Aliases:
CVE-2015-1122
WebKit, as used in Apple iOS before 8.3, Apple TV before 7.2, and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-04-08-1, APPLE-SA-2015-04-08-3, and APPLE-SA-2015-04-08-4.
2.4.10-0ubuntu1
Affected by 0 other vulnerabilities.
VCID-gxvr-nz2t-aaad
Aliases:
CVE-2015-3752
The Content Security Policy implementation in WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, does not properly restrict cookie transmission for report requests, which allows remote attackers to obtain sensitive information via vectors involving (1) a cross-origin request or (2) a private-browsing request.
2.4.10-0ubuntu1
Affected by 0 other vulnerabilities.
VCID-n129-8y4q-aaam
Aliases:
CVE-2015-3741
WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.
2.4.10-0ubuntu1
Affected by 0 other vulnerabilities.
VCID-n6dg-m9pu-aaaq
Aliases:
CVE-2015-3747
WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.
2.4.10-0ubuntu1
Affected by 0 other vulnerabilities.
VCID-pd23-r1v8-aaaa
Aliases:
CVE-2015-1076
WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2015-03-17-1.
2.4.10-0ubuntu1
Affected by 0 other vulnerabilities.
VCID-pq8a-y1ac-aaaj
Aliases:
CVE-2015-5794
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.
2.4.10-0ubuntu1
Affected by 0 other vulnerabilities.
VCID-scux-psag-aaae
Aliases:
CVE-2015-5788
The WebKit Canvas implementation in Apple iOS before 9 allows remote attackers to bypass the Same Origin Policy and obtain sensitive image information via vectors involving a CANVAS element.
2.4.10-0ubuntu1
Affected by 0 other vulnerabilities.
VCID-seg7-ppr4-aaaj
Aliases:
CVE-2015-5822
WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.
2.4.10-0ubuntu1
Affected by 0 other vulnerabilities.
VCID-snvs-29mq-aaah
Aliases:
CVE-2015-3748
WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.
2.4.10-0ubuntu1
Affected by 0 other vulnerabilities.
VCID-sur1-ngrj-aaak
Aliases:
CVE-2015-1083
WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2015-03-17-1.
2.4.10-0ubuntu1
Affected by 0 other vulnerabilities.
VCID-vekk-ddyu-aaac
Aliases:
CVE-2015-5801
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.
2.4.10-0ubuntu1
Affected by 0 other vulnerabilities.
VCID-y7ct-2xcb-aaaf
Aliases:
CVE-2015-1081
WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2015-03-17-1.
2.4.10-0ubuntu1
Affected by 0 other vulnerabilities.
VCID-yuba-72dr-aaac
Aliases:
CVE-2015-3658
The Page Loading functionality in WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7, as used in Apple iOS before 8.4 and other products, does not properly consider redirects during decisions about sending an Origin header, which makes it easier for remote attackers to bypass CSRF protection mechanisms via a crafted web site.
2.4.10-0ubuntu1
Affected by 0 other vulnerabilities.
VCID-zags-qxzr-aaaa
Aliases:
CVE-2015-1071
WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2015-03-17-1.
2.4.10-0ubuntu1
Affected by 0 other vulnerabilities.
VCID-zqk2-6qhn-aaan
Aliases:
CVE-2015-3731
WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.
2.4.10-0ubuntu1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version