NVD

Id
13306  
Name
CVE-2010-1807  
Description
WebKit in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2; Android before 2.2; and webkitgtk before 1.2.6; does not properly validate floating-point data, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted HTML document, related to non-standard NaN representation.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-09-10  
Modified Date
2012-09-14  
Seq
2010-1807  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
73702 13306 CVE-2010-1807 APPLE-SA-2010-11-22-1  View
73703 13306 CVE-2010-1807 APPLE-SA-2010-09-07-1  View
73704 13306 CVE-2010-1807 SUSE-SR:2011:002  View
73705 13306 CVE-2010-1807 oval:org.mitre.oval:def:11964  View
73706 13306 CVE-2010-1807 http://support.apple.com/kb/HT4333  View
73707 13306 CVE-2010-1807 http://support.apple.com/kb/HT4456  View
73708 13306 CVE-2010-1807 http://trac.webkit.org/changeset/64706  View
73709 13306 CVE-2010-1807 http://www.computerworld.com/s/article/9195058/Researcher_to_release_Web_based_Android_attack  View
73710 13306 CVE-2010-1807 MDVSA-2011:039  View
73711 13306 CVE-2010-1807 RHSA-2011:0177  View
73712 13306 CVE-2010-1807 43047  View
73713 13306 CVE-2010-1807 USN-1006-1  View
73714 13306 CVE-2010-1807 ADV-2010-2722  View
73715 13306 CVE-2010-1807 ADV-2010-3046  View
73716 13306 CVE-2010-1807 ADV-2011-0212  View
73717 13306 CVE-2010-1807 ADV-2011-0216  View
73718 13306 CVE-2010-1807 ADV-2011-0552  View
73719 13306 CVE-2010-1807 https://bugzilla.redhat.com/show_bug.cgi?id=627703  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36278 JVNDB-2010-002058 Apple Safari の WebKit における任意のコードを実行される脆弱性 Apple Safari の WebKit は、浮動小数点のデータを適切に検証しないため、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2010-1807 44387 CVE-2010-1807 13306 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002058.html 2010-09-07 2011-02-04 View