CVE-2010-0053

Опубликовано: 15 мар. 2010

Источник: nvd

CVSS2: 9.3

EPSS Низкий

Описание

Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to the run-in Cascading Style Sheets (CSS) display property.

Комментарий

Per: http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html

CVE-ID: CVE-2010-0053 Available for: Mac OS X v10.4.11, Mac OS X Server v10.4.11, Mac OS X v10.5.8, Mac OS X Server v10.5.8, Mac OS X v10.6.1 or later, Mac OS X Server v10.6.1 or later, Windows 7, Vista, XP Impact: Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution Description: A use-after-free issue exists in the rendering of content with a CSS display property set to 'run-in'. Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution. This issue is addressed through improved memory reference tracking. Credit to wushi of team509, working with TippingPoint's Zero Day Initiative for reporting this issue.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*

Версия до 4.0.4 (включая)

cpe:2.3:a:apple:safari:4.0:*:*:*:*:*:*:*

cpe:2.3:a:apple:safari:4.0:beta:*:*:*:*:*:*

cpe:2.3:a:apple:safari:4.0.0b:*:*:*:*:*:*:*

cpe:2.3:a:apple:safari:4.0.1:*:*:*:*:*:*:*

cpe:2.3:a:apple:safari:4.0.2:*:*:*:*:*:*:*

cpe:2.3:a:apple:safari:4.0.3:*:*:*:*:*:*:*

EPSS

Процентиль: 91%

0.06495

Низкий

9.3 Critical

CVSS2

Дефекты

CWE-399

Связанные уязвимости

CVE-2010-0053

ubuntu

почти 16 лет назад

CVE-2010-0053

redhat

почти 16 лет назад

CVE-2010-0053

debian

почти 16 лет назад

Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 al ...

GHSA-g5j6-vhp8-xrgj

github

больше 3 лет назад

EPSS

Процентиль: 91%

0.06495

Низкий

9.3 Critical

CVSS2

Дефекты

CWE-399