HIGH
WebKit: memory corruption vulnerability in rendering of certain CSS-styled HTML content
Published Jun 11, 2010
9.3
HIGHCVSS 2.0
EPSS 6.56%
Description
The Cascading Style Sheets (CSS) implementation in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via HTML content that contains multiple :after pseudo-selectors.
Affected products
No data.
Configuration 1
AND
Running on/with
OR
- 10.5
- 10.5.0
- 10.5.1
- 10.5.2
- 10.5.3
- 10.5.4
- 10.5.5
- 10.5.6
- 10.5.7
- 10.5.8
- 10.6.0
- 10.6.1
- 10.6.2
- 10.6.3
- 10.5
- 10.5.0
- 10.5.1
- 10.5.2
- 10.5.3
- 10.5.4
- 10.5.5
- 10.5.6
- 10.5.7
- 10.5.8
- 10.6.0
- 10.6.1
- 10.6.2
- 10.6.3
- n/a
- n/a
- n/a
- n/a
Configuration 2
AND
Running on/with
OR
- 10.4
- 10.4.0
- 10.4.1
- 10.4.2
- 10.4.3
- 10.4.4
- 10.4.5
- 10.4.6
- 10.4.7
- 10.4.8
- 10.4.9
- 10.4.10
- 10.4.11
- 10.4
- 10.4.0
- 10.4.1
- 10.4.2
- 10.4.3
- 10.4.4
- 10.4.5
- 10.4.6
- 10.4.7
- 10.4.8
- 10.4.9
- 10.4.10
- 10.4.11
No data.
Red Hat Enterprise Linux 6
qt
Will not fix
Red Hat Enterprise Linux 6
webkitgtk
Will not fix
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 6 | qt | Will not fix | n/a |
| Red Hat Enterprise Linux 6 | webkitgtk | Will not fix | n/a |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (30)
- http://lists.apple.com/archives/security-announce/2010//Jun/msg00002.html vendor-advisoryx_refsource_APPLE
- http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html vendor-advisoryx_refsource_APPLE
- http://lists.apple.com/archives/security-announce/2010/Jun/msg00000.html vendor-advisoryx_refsource_APPLEPatchVendor Advisory
- http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html vendor-advisoryx_refsource_APPLE
- http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html vendor-advisoryx_refsource_SUSE
- http://secunia.com/advisories/40105 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/40196 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/41856 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/42314 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/43068 third-party-advisoryx_refsource_SECUNIA
- http://securitytracker.com/id?1024067 vdb-entryx_refsource_SECTRACK
- http://support.apple.com/kb/HT4196 x_refsource_CONFIRMVendor Advisory
- http://support.apple.com/kb/HT4220 x_refsource_CONFIRM
- http://support.apple.com/kb/HT4225 x_refsource_CONFIRM
- http://support.apple.com/kb/HT4456 x_refsource_CONFIRM
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:039 vendor-advisoryx_refsource_MANDRIVA
- http://www.securityfocus.com/bid/40620 vdb-entryx_refsource_BIDPatch
- http://www.securityfocus.com/bid/40672 vdb-entryx_refsource_BID
- http://www.ubuntu.com/usn/USN-1006-1 vendor-advisoryx_refsource_UBUNTU
- http://www.vupen.com/english/advisories/2010/1373 vdb-entryx_refsource_VUPENPatchVendor Advisory
- http://www.vupen.com/english/advisories/2010/1512 vdb-entryx_refsource_VUPEN
- http://www.vupen.com/english/advisories/2010/2722 vdb-entryx_refsource_VUPEN
- http://www.vupen.com/english/advisories/2011/0212 vdb-entryx_refsource_VUPEN
- http://www.vupen.com/english/advisories/2011/0552 vdb-entryx_refsource_VUPEN
- https://access.redhat.com/security/cve/CVE-2010-1417 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=596471 Issue Tracking
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2010-1445 Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2010-1417
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6876 vdb-entrysignaturex_refsource_OVAL
- https://www.cve.org/CVERecord?id=CVE-2010-1417
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner apple
Published Jun 11, 2010
Updated Aug 7, 2024
Reserved Apr 15, 2010
Link CVE-2010-1417
CISA Vulnrichment
Updated n/a
ENISA EUVD
EUVD-2010-1445 Assigner apple
Published Jun 11, 2010
Updated Aug 7, 2024
Exploited since n/a
Link EUVD-2010-1445