The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - WebKit: Improper handling of data types from event objects (CVE-2010-4205)

  - webkitgtk: heap-based buffer overflow (WSA-2015-0001) (CVE-2014-1303)

  - Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and     Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a     denial of service (application crash) via vectors involving HTML document subtrees. (CVE-2010-1761)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

Versions of Google Chrome earlier than 7.0.517.44 are potentially affected by multiple vulnerabilities :

  - A use-after-free error exists in text editing. (51602)

  - A memory corruption error exists relating to enormous text area. (55257)

  - A bad cast exists with the SVG use element. (58657)

  - An invalid memory read exists in XPath handling. (58731)

  - A use-after-free error exists in text-control-selections. (58741)

  - Multiple integer overflows exists in font handling. (59320)

  - A memory corruption issue exists in libvpx. (60055)

  - A bad use of a destroyed frame object exists. (60238)

  - Multiple type confusions exists with event objects. (60327, 60769, 61255)

  - An out-of-bounds array access exists in SVG handling. (60688)

ID	名稱	產品	系列	已發布	已更新	嚴重性
199473	RHEL 6 : webkitgtk (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	2024/6/3	2024/10/8	critical
800908	Google Chrome < 7.0.517.44 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	2010/11/4		high

偵測

搜尋 Plugin

critical

high