PT-2010-3094 · Microsoft+1 · Windows+3
Wushi
·
Publicado
2010-06-08
·
Atualizado
2018-10-10
·
CVE-2010-1398
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Apple Safari versions prior to 5.0 on Mac OS X 10.5 through 10.6 and Windows
Apple Safari versions prior to 4.1 on Mac OS X 10.4
Description
The issue is related to the improper performance of ordered list insertions in WebKit, allowing remote attackers to execute arbitrary code or cause a denial of service via a crafted HTML document. This is due to the insertion of an unspecified element into an editable container and the access of an uninitialized element.
Recommendations
For Apple Safari versions prior to 5.0 on Mac OS X 10.5 through 10.6 and Windows, update to version 5.0 or later.
For Apple Safari versions prior to 4.1 on Mac OS X 10.4, update to version 4.1 or later.
Correção
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Macos X
Safari
Webkit
Windows