PT-2010-3445 · Webkit+2 · Webkitgtk+3

Wushi · CVE-2010-1812 · Publicado 2010-09-09 · Atualizado 2022-08-09

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 4.1 webkitgtk versions prior to 1.2.6

Description The issue is related to a use-after-free vulnerability in WebKit, which allows remote attackers to execute arbitrary code or cause a denial of service, resulting in an application crash. This can be achieved via vectors involving selections.

Recommendations For Apple iOS versions prior to 4.1, update to version 4.1 or later to resolve the issue. For webkitgtk versions prior to 1.2.6, update to version 1.2.6 or later to resolve the issue.

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2010-1812

RHSA-2011:0177

RHSA-2011_0177

Produtos afetados

Red Hat

Safari

Ios

Webkitgtk

Referências · 59

• https://access.redhat.com/security/cve/CVE-2010-4197 · Nota
• http://support.apple.com/kb/HT4455 · Aviso do Fabricante
• http://lists.apple.com/archives/security-announce/2010//Sep/msg00002.html · Aviso do Fabricante
• https://linux.oracle.com/errata/ELSA-2011-0177.html · Aviso do Fabricante
• http://vupen.com/english/advisories/2010/2722 · Aviso do Fabricante
• http://vupen.com/english/advisories/2011/0212 · Nota
• http://code.google.com/p/chromium/issues/detail?id=60238 · Nota
• https://access.redhat.com/security/cve/CVE-2010-1792 · Nota
• https://access.redhat.com/security/cve/CVE-2010-1784 · Nota
• https://access.redhat.com/security/cve/CVE-2010-1793 · Nota
• http://redhat.com/support/errata/RHSA-2011-0177.html · Aviso do Fabricante
• http://support.apple.com/kb/HT4334 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/61699 · Nota
• http://vupen.com/english/advisories/2011/0216 · Nota
• https://access.redhat.com/security/cve/CVE-2010-1812 · Nota