PT-2010-3099 · Microsoft+1 · Windows+2
Published
2010-06-08
·
Updated
2018-10-10
·
CVE-2010-1403
CVSS v2.0
9.3
High
| Vector | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Apple Safari versions prior to 5.0 on Mac OS X 10.5 through 10.6 and Windows
Apple Safari versions prior to 4.1 on Mac OS X 10.4
Description
The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted document containing XML that triggers a parsing error, related to
ProcessInstruction. This occurs during the handling of a use element in an SVG document, where uninitialized memory is accessed.Recommendations
For Apple Safari versions prior to 5.0 on Mac OS X 10.5 through 10.6 and Windows, update to version 5.0 or later.
For Apple Safari versions prior to 4.1 on Mac OS X 10.4, update to version 4.1 or later.
Fix
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Macos X
Safari
Windows