CVE-2010-0048

Опубликовано: 15 мар. 2010

Источник: nvd

CVSS3: 8.8

CVSS2: 9.3

EPSS Низкий

Описание

Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted XML document.

Комментарий

Per: http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html

CVE-ID: CVE-2010-0048 Available for: Mac OS X v10.4.11, Mac OS X Server v10.4.11, Mac OS X v10.5.8, Mac OS X Server v10.5.8, Mac OS X v10.6.1 or later, Mac OS X Server v10.6.1 or later, Windows 7, Vista, XP Impact: Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution Description: A use-after-free issue exists in WebKit's parsing of XML documents. Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution. This issue is addressed through improved memory reference tracking.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*

Версия до 4.0.4 (включая)

cpe:2.3:a:apple:safari:4.0:*:*:*:*:*:*:*

cpe:2.3:a:apple:safari:4.0:beta:*:*:*:*:*:*

cpe:2.3:a:apple:safari:4.0.1:*:*:*:*:*:*:*

cpe:2.3:a:apple:safari:4.0.2:*:*:*:*:*:*:*

cpe:2.3:a:apple:safari:4.0.3:*:*:*:*:*:*:*

EPSS

Процентиль: 89%

0.04724

Низкий

8.8 High

CVSS3

9.3 Critical

CVSS2

Дефекты

CWE-399

Связанные уязвимости

CVE-2010-0048

CVSS3: 8.8

ubuntu

почти 16 лет назад

Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted XML document.

CVE-2010-0048

redhat

почти 16 лет назад

Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted XML document.

CVE-2010-0048

CVSS3: 8.8

debian

почти 16 лет назад

Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 al ...

GHSA-fjgj-7v2v-3cmq

CVSS3: 8.8

github

больше 3 лет назад

Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted XML document.

EPSS

Процентиль: 89%

0.04724

Низкий

8.8 High

CVSS3

9.3 Critical

CVSS2

Дефекты

CWE-399