CVE-2010-1401

2010-06-1118:00:00

CWE-399

[email protected]

web.nvd.nist.gov

cve-2010-1401

webkit

css

safari

mac os x

windows

remote code execution

denial of service

7.4 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.869 High

EPSS

Percentile

98.6%

JSON

Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving the :first-letter pseudo-element.

CPENameOperatorVersion
apple:safariapple safarile4.0.5
apple:safariapple safarieq4.0
apple:safariapple safarieq4.0.0b
apple:safariapple safarieq4.0.1
apple:safariapple safarieq4.0.2
apple:safariapple safarieq4.0.3
apple:safariapple safarieq4.0.4
apple:webkitapple webkiteq*

CPE	Name	Operator	Version
apple:safari	apple safari	le	4.0.5
apple:safari	apple safari	eq	4.0
apple:safari	apple safari	eq	4.0.0b
apple:safari	apple safari	eq	4.0.1
apple:safari	apple safari	eq	4.0.2
apple:safari	apple safari	eq	4.0.3
apple:safari	apple safari	eq	4.0.4
apple:webkit	apple webkit	eq	*