Description
Off-by-one error in the WebSocketHandshake::readServerHandshake function in websockets/WebSocketHandshake.cpp in WebCore in WebKit before r56380, as used in Qt and other products, allows remote websockets servers to cause a denial of service (memory corruption) or possibly have unspecified other impact via an upgrade header that is long and invalid.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:039 ↗
- http://www.vupen.com/english/advisories/2010/2722 ↗
- http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044031.html ↗
- http://secunia.com/advisories/43068 ↗
- http://www.vupen.com/english/advisories/2010/1801 ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=596494 ↗
- http://www.ubuntu.com/usn/USN-1006-1 ↗
- http://secunia.com/advisories/41856 ↗
- http://www.vupen.com/english/advisories/2011/0212 ↗
- https://bugs.webkit.org/show_bug.cgi?id=36339 ↗
- http://secunia.com/advisories/40557 ↗
- http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html ↗
- http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044023.html ↗
- http://www.vupen.com/english/advisories/2011/0552 ↗
- http://trac.webkit.org/changeset/56380 ↗