PT-2010-3425 · Gtk+2 · Webkitgtk+2
Publicado
2010-07-30
·
Atualizado
2017-09-19
·
CVE-2010-1790
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Apple Safari versions prior to 5.0.1 on Mac OS X 10.5 through 10.6 and Windows
Apple Safari versions prior to 4.1.1 on Mac OS X 10.4
webkitgtk versions prior to 1.2.6
Description
The issue is related to a "reentrancy issue" and allows remote attackers to execute arbitrary code or cause a denial of service via a crafted HTML document. This is due to the improper handling of just-in-time (JIT) compiled JavaScript stubs.
Recommendations
For Apple Safari versions prior to 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, update to version 5.0.1 or later.
For Apple Safari versions prior to 4.1.1 on Mac OS X 10.4, update to version 4.1.1 or later.
For webkitgtk versions prior to 1.2.6, update to version 1.2.6 or later.
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Red Hat
Safari
Webkitgtk