CVE

Id
46403  
CVE No.
CVE-2010-3819  
Status
Candidate  
Description
WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly perform a cast of an unspecified variable during processing of Cascading Style Sheets (CSS) boxes, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted web site.  
Phase
Assigned (20101007)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
506292 46403 CVE-2010-3819 CONFIRM:http://support.apple.com/kb/HT4455  View
506293 46403 CVE-2010-3819 CONFIRM:http://support.apple.com/kb/HT4456  View
506294 46403 CVE-2010-3819 APPLE:APPLE-SA-2010-11-18-1  View
506295 46403 CVE-2010-3819 URL:http://lists.apple.com/archives/security-announce/2010//Nov/msg00002.html  View
506296 46403 CVE-2010-3819 APPLE:APPLE-SA-2010-11-22-1  View
506297 46403 CVE-2010-3819 URL:http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html  View
506298 46403 CVE-2010-3819 SUSE:SUSE-SR:2011:002  View
506299 46403 CVE-2010-3819 URL:http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html  View
506300 46403 CVE-2010-3819 OVAL:oval:org.mitre.oval:def:11308  View
506301 46403 CVE-2010-3819 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11308  View
506302 46403 CVE-2010-3819 SECUNIA:42314  View
506303 46403 CVE-2010-3819 URL:http://secunia.com/advisories/42314  View
506304 46403 CVE-2010-3819 SECUNIA:43068  View
506305 46403 CVE-2010-3819 URL:http://secunia.com/advisories/43068  View
506306 46403 CVE-2010-3819 VUPEN:ADV-2010-3046  View
506307 46403 CVE-2010-3819 URL:http://www.vupen.com/english/advisories/2010/3046  View
506308 46403 CVE-2010-3819 VUPEN:ADV-2011-0212  View
506309 46403 CVE-2010-3819 URL:http://www.vupen.com/english/advisories/2011/0212  View
506310 46403 CVE-2010-3819 XF:safari-css-boxes-code-execution(63358)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
36734 JVNDB-2010-002514 Apple Safari の WebKit における任意のコードを実行される脆弱性 Apple Safari の WebKit には、Geolocation オブジェクトの処理に関して不備があるため、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2010-3823 46403 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002514.html  View