CVE-2010-0050

Опубликовано: 15 мар. 2010

Источник: nvd

CVSS3: 8.8

CVSS2: 9.3

EPSS Средний

Описание

Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an HTML document with improperly nested tags.

Комментарий

Per: http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html

'WebKit CVE-ID: CVE-2010-0050 Available for: Mac OS X v10.4.11, Mac OS X Server v10.4.11, Mac OS X v10.5.8, Mac OS X Server v10.5.8, Mac OS X v10.6.1 or later, Mac OS X Server v10.6.1 or later, Windows 7, Vista, XP Impact: Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution Description: A use-after-free issue exists in WebKit's handling of incorrectly nested HTML tags. Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution. This issue is addressed through improved memory reference tracking. Credit to wushi&Z of team509 working with TippingPoint's Zero Day Initiative for reporting this issue.'

Ссылки

http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html
Mailing List
http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html
Mailing List
Vendor Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041383.html
Mailing List
http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041432.html
Mailing List
http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041436.html
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
Mailing List
http://secunia.com/advisories/41856
Broken Link
http://secunia.com/advisories/43068
Broken Link
http://support.apple.com/kb/HT4070
Vendor Advisory
http://support.apple.com/kb/HT4225
Vendor Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2011:039
Broken Link
http://www.securityfocus.com/bid/38671
Broken Link
Patch
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1023708
Broken Link
Third Party Advisory
VDB Entry
http://www.ubuntu.com/usn/USN-1006-1
Third Party Advisory
http://www.vupen.com/english/advisories/2010/2722
Broken Link
http://www.vupen.com/english/advisories/2011/0212
Broken Link
http://www.vupen.com/english/advisories/2011/0552
Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/56836
Third Party Advisory
VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7587
Broken Link
http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html
Mailing List

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*

Версия до 4.0.5 (исключая)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия от 2.0 (включая) до 4.0 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:11:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:12:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:13:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:10.10:*:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:o:opensuse:opensuse:11.2:*:*:*:*:*:*:*

cpe:2.3:o:opensuse:opensuse:11.3:*:*:*:*:*:*:*

EPSS

Процентиль: 97%

0.45126

Средний

8.8 High

CVSS3

9.3 Critical

CVSS2

Дефекты

CWE-416

Связанные уязвимости

CVE-2010-0050

CVSS3: 8.8

ubuntu

почти 16 лет назад

CVE-2010-0050

redhat

почти 16 лет назад

CVE-2010-0050

CVSS3: 8.8

debian

почти 16 лет назад

Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 al ...

GHSA-x35p-q7vp-559r

CVSS3: 8.8

github

больше 3 лет назад

EPSS

Процентиль: 97%

0.45126

Средний

8.8 High

CVSS3

9.3 Critical

CVSS2

Дефекты

CWE-416