CVE

Id
43982  
CVE No.
CVE-2010-1398  
Status
Candidate  
Description
WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, does not properly perform ordered list insertions, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document, related to the insertion of an unspecified element into an editable container and the access of an uninitialized element.  
Phase
Assigned (20100415)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
479351 43982 CVE-2010-1398 BUGTRAQ:20100608 ZDI-10-097: Apple Webkit ContentEditable moveParagraphs Uninitialized Element Remote Code Execution Vulnerability  View
479352 43982 CVE-2010-1398 URL:http://www.securityfocus.com/archive/1/archive/1/511719/100/0/threaded  View
479353 43982 CVE-2010-1398 MISC:http://www.zerodayinitiative.com/advisories/ZDI-10-097  View
479354 43982 CVE-2010-1398 CONFIRM:http://support.apple.com/kb/HT4196  View
479355 43982 CVE-2010-1398 CONFIRM:http://support.apple.com/kb/HT4220  View
479356 43982 CVE-2010-1398 CONFIRM:http://support.apple.com/kb/HT4225  View
479357 43982 CVE-2010-1398 APPLE:APPLE-SA-2010-06-07-1  View
479358 43982 CVE-2010-1398 URL:http://lists.apple.com/archives/security-announce/2010/Jun/msg00000.html  View
479359 43982 CVE-2010-1398 APPLE:APPLE-SA-2010-06-16-1  View
479360 43982 CVE-2010-1398 URL:http://lists.apple.com/archives/security-announce/2010//Jun/msg00002.html  View
479361 43982 CVE-2010-1398 APPLE:APPLE-SA-2010-06-21-1  View
479362 43982 CVE-2010-1398 URL:http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html  View
479363 43982 CVE-2010-1398 MANDRIVA:MDVSA-2011:039  View
479364 43982 CVE-2010-1398 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2011:039  View
479365 43982 CVE-2010-1398 SUSE:SUSE-SR:2011:002  View
479366 43982 CVE-2010-1398 URL:http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html  View
479367 43982 CVE-2010-1398 UBUNTU:USN-1006-1  View
479368 43982 CVE-2010-1398 URL:http://www.ubuntu.com/usn/USN-1006-1  View
479369 43982 CVE-2010-1398 BID:40620  View
479370 43982 CVE-2010-1398 URL:http://www.securityfocus.com/bid/40620  View
479371 43982 CVE-2010-1398 OVAL:oval:org.mitre.oval:def:7556  View
479372 43982 CVE-2010-1398 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:7556  View
479373 43982 CVE-2010-1398 SECTRACK:1024067  View
479374 43982 CVE-2010-1398 URL:http://securitytracker.com/id?1024067  View
479375 43982 CVE-2010-1398 SECUNIA:40105  View
479376 43982 CVE-2010-1398 URL:http://secunia.com/advisories/40105  View
479377 43982 CVE-2010-1398 SECUNIA:40196  View
479378 43982 CVE-2010-1398 URL:http://secunia.com/advisories/40196  View
479379 43982 CVE-2010-1398 SECUNIA:41856  View
479380 43982 CVE-2010-1398 URL:http://secunia.com/advisories/41856  View
479381 43982 CVE-2010-1398 SECUNIA:43068  View
479382 43982 CVE-2010-1398 URL:http://secunia.com/advisories/43068  View
479383 43982 CVE-2010-1398 VUPEN:ADV-2010-1373  View
479384 43982 CVE-2010-1398 URL:http://www.vupen.com/english/advisories/2010/1373  View
479385 43982 CVE-2010-1398 VUPEN:ADV-2010-1512  View
479386 43982 CVE-2010-1398 URL:http://www.vupen.com/english/advisories/2010/1512  View
479387 43982 CVE-2010-1398 VUPEN:ADV-2010-2722  View
479388 43982 CVE-2010-1398 URL:http://www.vupen.com/english/advisories/2010/2722  View
479389 43982 CVE-2010-1398 VUPEN:ADV-2011-0212  View
479390 43982 CVE-2010-1398 URL:http://www.vupen.com/english/advisories/2011/0212  View
479391 43982 CVE-2010-1398 VUPEN:ADV-2011-0552  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
35778 JVNDB-2010-001558 Apple Safari の WebKit における任意のコードを実行される脆弱性 Apple Safari の WebKit には、SVG ドキュメント内のイベントリスナの処理に不備があるため、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2010-1402 43982 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001558.html  View