CVE
- Id
- 43980
- CVE No.
- CVE-2010-1396
- Status
- Candidate
- Description
- Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to the contentEditable attribute and removing container elements.
- Phase
- Assigned (20100415)
- Votes
- None (candidate not yet proposed)
- Comments
Related CVE References
| Id | CVE Id | CVE No. | Reference | Actions |
|---|---|---|---|---|
| 479269 | 43980 | CVE-2010-1396 | MISC:http://www.zerodayinitiative.com/advisories/ZDI-10-092 | View |
| 479270 | 43980 | CVE-2010-1396 | CONFIRM:http://support.apple.com/kb/HT4196 | View |
| 479271 | 43980 | CVE-2010-1396 | CONFIRM:http://support.apple.com/kb/HT4220 | View |
| 479272 | 43980 | CVE-2010-1396 | CONFIRM:http://support.apple.com/kb/HT4225 | View |
| 479273 | 43980 | CVE-2010-1396 | APPLE:APPLE-SA-2010-06-07-1 | View |
| 479274 | 43980 | CVE-2010-1396 | URL:http://lists.apple.com/archives/security-announce/2010/Jun/msg00000.html | View |
| 479275 | 43980 | CVE-2010-1396 | APPLE:APPLE-SA-2010-06-16-1 | View |
| 479276 | 43980 | CVE-2010-1396 | URL:http://lists.apple.com/archives/security-announce/2010//Jun/msg00002.html | View |
| 479277 | 43980 | CVE-2010-1396 | APPLE:APPLE-SA-2010-06-21-1 | View |
| 479278 | 43980 | CVE-2010-1396 | URL:http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html | View |
| 479279 | 43980 | CVE-2010-1396 | MANDRIVA:MDVSA-2011:039 | View |
| 479280 | 43980 | CVE-2010-1396 | URL:http://www.mandriva.com/security/advisories?name=MDVSA-2011:039 | View |
| 479281 | 43980 | CVE-2010-1396 | SUSE:SUSE-SR:2011:002 | View |
| 479282 | 43980 | CVE-2010-1396 | URL:http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html | View |
| 479283 | 43980 | CVE-2010-1396 | UBUNTU:USN-1006-1 | View |
| 479284 | 43980 | CVE-2010-1396 | URL:http://www.ubuntu.com/usn/USN-1006-1 | View |
| 479285 | 43980 | CVE-2010-1396 | BID:40620 | View |
| 479286 | 43980 | CVE-2010-1396 | URL:http://www.securityfocus.com/bid/40620 | View |
| 479287 | 43980 | CVE-2010-1396 | BID:40647 | View |
| 479288 | 43980 | CVE-2010-1396 | URL:http://www.securityfocus.com/bid/40647 | View |
| 479289 | 43980 | CVE-2010-1396 | OVAL:oval:org.mitre.oval:def:7288 | View |
| 479290 | 43980 | CVE-2010-1396 | URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:7288 | View |
| 479291 | 43980 | CVE-2010-1396 | SECTRACK:1024067 | View |
| 479292 | 43980 | CVE-2010-1396 | URL:http://securitytracker.com/id?1024067 | View |
| 479293 | 43980 | CVE-2010-1396 | SECUNIA:40105 | View |
| 479294 | 43980 | CVE-2010-1396 | URL:http://secunia.com/advisories/40105 | View |
| 479295 | 43980 | CVE-2010-1396 | SECUNIA:40196 | View |
| 479296 | 43980 | CVE-2010-1396 | URL:http://secunia.com/advisories/40196 | View |
| 479297 | 43980 | CVE-2010-1396 | SECUNIA:41856 | View |
| 479298 | 43980 | CVE-2010-1396 | URL:http://secunia.com/advisories/41856 | View |
| 479299 | 43980 | CVE-2010-1396 | SECUNIA:43068 | View |
| 479300 | 43980 | CVE-2010-1396 | URL:http://secunia.com/advisories/43068 | View |
| 479301 | 43980 | CVE-2010-1396 | VUPEN:ADV-2010-1373 | View |
| 479302 | 43980 | CVE-2010-1396 | URL:http://www.vupen.com/english/advisories/2010/1373 | View |
| 479303 | 43980 | CVE-2010-1396 | VUPEN:ADV-2010-1512 | View |
| 479304 | 43980 | CVE-2010-1396 | URL:http://www.vupen.com/english/advisories/2010/1512 | View |
| 479305 | 43980 | CVE-2010-1396 | VUPEN:ADV-2010-2722 | View |
| 479306 | 43980 | CVE-2010-1396 | URL:http://www.vupen.com/english/advisories/2010/2722 | View |
| 479307 | 43980 | CVE-2010-1396 | VUPEN:ADV-2011-0212 | View |
| 479308 | 43980 | CVE-2010-1396 | URL:http://www.vupen.com/english/advisories/2011/0212 | View |
| 479309 | 43980 | CVE-2010-1396 | VUPEN:ADV-2011-0552 | View |
Related JVN
| Id | JVN No. | Title | Summary | CVE No. | CVE Id | CVSS_v2 | CVSS_v3 | JVN URL | Actions |
|---|---|---|---|---|---|---|---|---|---|
| 35776 | JVNDB-2010-001556 | Apple Safari の WebKit における任意のコードを実行される脆弱性 | Apple Safari の WebKit には、caption 要素の処理に不備があるため、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。 | CVE-2010-1400 | 43980 | 9.3 | http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001556.html | View |