(PVS) Signatures - Tenable Network Security

memory access issue exists in WebKit's handling of selection changes on form input
elements. (CVE-2010-1399)\n\n - A use after free issue exists in WebKit's handling of
caption elements. (CVE-2010-1400)\n\n - A use after free issue exists in WebKit's handling
of the ':first-letter' pseudo-element in cascading stylesheets. (CVE-2010-1401)\n\n - a
double free issue exists in WebKit's handling of event listeners in SVG documents.
(CVE-2010-1402)\n\n - An uninitialized memory access issue exists in WebKit's handling
of 'use' elements in SVG documents. (CVE-2010-1403)\n\n - A use after free issue exists in
WebKit's handling of SVG documents with multiple 'use' elements. (CVE-2010-1404)\n\n -
A memory corruption issue exists in WebKit's handling of nested 'use' elements in SVG
documents. (CVE-2010-1410)\n\n - A use after free issue exists in WebKit's handling of
CSS run-ins. (CVE-2010-1749)\n\n - A use after free issue exists in WebKit's handling of
HTML elements with custom vertical positioning. (CVE-2010-1405)\n\n - When WebKit is
redirected from an HTTPS site to an HTTP site, the Referer header is passed to the HTTP
site. (CVE-2010-1406)\n\n - An integer truncation issue exists in WebKit's handling of
requests to non-default TCP ports. (CVE-2010-1408)\n\n - Common IRC service ports are
not included in WebKit's port blacklist. (CVE-2010-1409)\n\n - A use after free issue exists
in WebKit's handling of hover events. (CVE-2010-1412)\n\n - In certain circumstances,
WebKit may send NTLM credentials in plain text. (CVE-2010-1413)\n\n - A use after free
issue exists in WebKit's handling of the removeChild DOM method. (CVE-2010-1414)\n\n
- An API abuse issue exists in WebKit's handling of libxml contexts. (CVE-2010-1415)\n\n
- A cross-site image capture issue exists in WebKit. (CVE-2010-1416)\n\n - A memory
corruption issue exists in WebKit's rendering of CSS-styled HTML content with multiple
:after pseudo-selectors. (CVE-2010-1417)\n\n - An input validation issue exists in WebKit's
handling of the src attribute of the frame element (CVE-2010-1418)\n\n - A use after free
issue exists in WebKit's handling of drag and drop when the window acting as a source of a
drag operation is closed before the drag operation is completed. (CVE-2010-1419)\n\n - A
design issue exists in the implementation of the JavaScript function execCommand.
(CVE-2010-1421)\n\n - An issue in WebKit's handling of malformed URLs may result in a
cross-site scripting attack when visiting a maliciously crafted website.
(CVE-2010-0544)\n\n - A use after free issue exists in WebKit's handling of DOM Range
objects. (CVE-2010-1758)\n\n - A use after free issue exists in WebKit's handling of the
Node.normalize method. (CVE-2010-1759)\n\n - A use after free issue exist sin WebKit's
rendering of HTML document subtrees. (CVE-2010-1761)\n\n - A design issue exists in the
handling of HTML contained in textarea elements. (CVE-2010-1762)\n\n - A design issue
exists in WebKit's handling of HTTP redirects. (CVE-2010-1764)\n\n - A type checking
issue exists in WebKit's handling of text nodes. (CVE-2010-1770)\n\n - A use after free
issue exists in WebKit's handling of fonts. (CVE-2010-1771)\n\n - An out of bounds
memory access issue exists in WebKit's handling of HTML tables. (CVE-2010-1774)\n\n -
A design issue exists in WebKit's handling of the CSS :visited pseudo-class.
Solution: Upgrade to Safari 4.1, 5.0, or later.
CVE-2010-2264
Passive Vulnerability Scanner (PVS) Signatures
Google Chrome < 5.0.375.70 Multiple Vulnerabilities
PVS ID: 5567 FAMILY: Web Clients RISK: HIGH NESSUS ID:46850
Family Internet Services 1492