PT-2010-3100 · Microsoft+1 · Windows+2

Wushi

·

Publicado

2010-06-08

·

Atualizado

2018-10-10

·

CVE-2010-1404

CVSS v2.0

9.3

Alta

VetorAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 5.0 on Mac OS X 10.5 through 10.6 and Windows Apple Safari versions prior to 4.1 on Mac OS X 10.4
Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via an SVG document that contains recursive Use elements, which are not properly handled during page deconstruction. This can lead to an application crash.
Recommendations For Apple Safari versions prior to 5.0 on Mac OS X 10.5 through 10.6 and Windows, update to version 5.0 or later. For Apple Safari versions prior to 4.1 on Mac OS X 10.4, update to version 4.1 or later.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2010-1404
ZDI-10-096

Produtos afetados

Macos X
Safari
Windows