PT-2010-3099 · Microsoft+1 · Windows+2
Publicado
2010-06-08
·
Atualizado
2018-10-10
·
CVE-2010-1403
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Apple Safari versions prior to 5.0 on Mac OS X 10.5 through 10.6 and Windows
Apple Safari versions prior to 4.1 on Mac OS X 10.4
Description
The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted document containing XML that triggers a parsing error, related to
ProcessInstruction. This occurs during the handling of a use element in an SVG document, where uninitialized memory is accessed.Recommendations
For Apple Safari versions prior to 5.0 on Mac OS X 10.5 through 10.6 and Windows, update to version 5.0 or later.
For Apple Safari versions prior to 4.1 on Mac OS X 10.4, update to version 4.1 or later.
Correção
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Macos X
Safari
Windows