PT-2010-1878 · Apple · Webkit+1

Wushi

·

Publicado

2010-03-12

·

Atualizado

2017-09-19

·

CVE-2010-0053

CVSS v2.0

9.3

Alta

VetorAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 4.0.5
Description The issue is related to a use-after-free vulnerability in WebKit, which can be exploited by remote attackers to execute arbitrary code or cause a denial of service, resulting in an application crash. This vulnerability is related to vectors involving the run-in Cascading Style Sheets (CSS) display property.
Recommendations For versions prior to 4.0.5, update to version 4.0.5 or later to resolve the issue. As a temporary workaround, consider restricting the use of CSS display properties related to run-in until a patch is applied.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2010-0053
ZDI-10-030

Produtos afetados

Safari
Webkit