CVE

Id
43988  
CVE No.
CVE-2010-1404  
Status
Candidate  
Description
Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an SVG document that contains recursive Use elements, which are not properly handled during page deconstruction.  
Phase
Assigned (20100415)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
479588 43988 CVE-2010-1404 BUGTRAQ:20100608 ZDI-10-096: Apple Webkit Recursive Use Element Remote Code Execution Vulnerability  View
479589 43988 CVE-2010-1404 URL:http://www.securityfocus.com/archive/1/archive/1/511718/100/0/threaded  View
479590 43988 CVE-2010-1404 MISC:http://www.zerodayinitiative.com/advisories/ZDI-10-096  View
479591 43988 CVE-2010-1404 CONFIRM:http://support.apple.com/kb/HT4196  View
479592 43988 CVE-2010-1404 CONFIRM:http://support.apple.com/kb/HT4220  View
479593 43988 CVE-2010-1404 CONFIRM:http://support.apple.com/kb/HT4225  View
479594 43988 CVE-2010-1404 APPLE:APPLE-SA-2010-06-07-1  View
479595 43988 CVE-2010-1404 URL:http://lists.apple.com/archives/security-announce/2010/Jun/msg00000.html  View
479596 43988 CVE-2010-1404 APPLE:APPLE-SA-2010-06-16-1  View
479597 43988 CVE-2010-1404 URL:http://lists.apple.com/archives/security-announce/2010//Jun/msg00002.html  View
479598 43988 CVE-2010-1404 APPLE:APPLE-SA-2010-06-21-1  View
479599 43988 CVE-2010-1404 URL:http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html  View
479600 43988 CVE-2010-1404 MANDRIVA:MDVSA-2011:039  View
479601 43988 CVE-2010-1404 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2011:039  View
479602 43988 CVE-2010-1404 SUSE:SUSE-SR:2011:002  View
479603 43988 CVE-2010-1404 URL:http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html  View
479604 43988 CVE-2010-1404 UBUNTU:USN-1006-1  View
479605 43988 CVE-2010-1404 URL:http://www.ubuntu.com/usn/USN-1006-1  View
479606 43988 CVE-2010-1404 BID:40620  View
479607 43988 CVE-2010-1404 URL:http://www.securityfocus.com/bid/40620  View
479608 43988 CVE-2010-1404 OVAL:oval:org.mitre.oval:def:7497  View
479609 43988 CVE-2010-1404 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:7497  View
479610 43988 CVE-2010-1404 SECTRACK:1024067  View
479611 43988 CVE-2010-1404 URL:http://securitytracker.com/id?1024067  View
479612 43988 CVE-2010-1404 SECUNIA:40105  View
479613 43988 CVE-2010-1404 URL:http://secunia.com/advisories/40105  View
479614 43988 CVE-2010-1404 SECUNIA:40196  View
479615 43988 CVE-2010-1404 URL:http://secunia.com/advisories/40196  View
479616 43988 CVE-2010-1404 SECUNIA:41856  View
479617 43988 CVE-2010-1404 URL:http://secunia.com/advisories/41856  View
479618 43988 CVE-2010-1404 SECUNIA:43068  View
479619 43988 CVE-2010-1404 URL:http://secunia.com/advisories/43068  View
479620 43988 CVE-2010-1404 VUPEN:ADV-2010-1373  View
479621 43988 CVE-2010-1404 URL:http://www.vupen.com/english/advisories/2010/1373  View
479622 43988 CVE-2010-1404 VUPEN:ADV-2010-1512  View
479623 43988 CVE-2010-1404 URL:http://www.vupen.com/english/advisories/2010/1512  View
479624 43988 CVE-2010-1404 VUPEN:ADV-2010-2722  View
479625 43988 CVE-2010-1404 URL:http://www.vupen.com/english/advisories/2010/2722  View
479626 43988 CVE-2010-1404 VUPEN:ADV-2011-0212  View
479627 43988 CVE-2010-1404 URL:http://www.vupen.com/english/advisories/2011/0212  View
479628 43988 CVE-2010-1404 VUPEN:ADV-2011-0552  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
35785 JVNDB-2010-001565 Apple Safari の WebKit における制限を回避される脆弱性 Apple Safari の WebKit には、整数切り捨て問題のため、デフォルト以外の TCP ポートへ外部接続する際、制限を回避される脆弱性が存在します。 CVE-2010-1408 43988 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001565.html  View