WebKit contains an unspecified overflow condition in the Web Inspector component [Source/WebCore/inspector/InspectorValues.cpp] when serializing the object tree. With a specially crafted web page, a context-dependent attacker can cause an unspecified impact.

Upgrade to version 1.4.2, or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds. It has been reported that this issue has also been fixed in revision 88761 part of nightly build r88778 from 14th June 2011.

Upgrade to Google Chrome version 13.0.782.107 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

• OVAL ID: 14330
• CVE ID: 2011-2788 (see also: NVD)
• Secunia Advisory ID: 45498 45691 46339 46377
• Bugtraq ID: 48960
• ISS X-Force ID: 68950
• Related OSVDB ID: 74228 74229 74230 74231 74232 74233 74234 74235 74236 74237 74239 74240 74241 74242 74243 74244 74245 74246 74247 74248 74250 74251 74252 74253 74254 74255 74256 74257 74258
• Vendor Specific News/Changelog Entry: http://code.google.com/p/chromium/issues/detail?id=85559
  http://googlechromereleases.blogspot.com/2011/08/stable-channel-update.html
  http://support.apple.com/kb/HT5000
  https://bugs.webkit.org/show_bug.cgi?id=52791 [ Auth Req'd ]
• Mail List Post: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html
  http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html
  http://lists.apple.com/archives/Security-announce/2011//Oct/msg00004.html
  http://seclists.org/bugtraq/2011/Oct/73
  http://seclists.org/bugtraq/2011/Oct/78
• Other Advisory URL: http://support.apple.com/kb/HT4981
  http://www.srware.net/forum/viewtopic.php?f=18&t=2552
• Vendor Specific Advisory URL: http://support.apple.com/kb/HT4999
• Vendor Specific Solution URL: http://trac.webkit.org/changeset/88444
• News Article: http://www.zdnet.com/blog/security/apple-slaps-another-security-band-aid-on-itunes/9598

• Mikolaj Malecki