Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveAppleCVE-2010-1807
HistorySep 10, 2010 - 7:00 p.m.

CVE-2010-1807

2010-09-1019:00:02
CWE-20
apple
web.nvd.nist.gov
121
webkit
apple safari
android
webkitgtk
cve-2010-1807
vulnerability
remote code execution
denial of service
nvd

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

8.9

Confidence

High

EPSS

0.922

Percentile

99.0%

JSON

WebKit in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2; Android before 2.2; and webkitgtk before 1.2.6; does not properly validate floating-point data, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted HTML document, related to non-standard NaN representation.

Affected configurations

Nvd
Node
applesafariMatch4.0
OR
applesafariMatch4.0beta
OR
applesafariMatch4.0.0b
OR
applesafariMatch4.0.1
OR
applesafariMatch4.0.2
OR
applesafariMatch4.0.3
OR
applesafariMatch4.0.4
OR
applesafariMatch4.0.5
OR
applesafariMatch4.1
OR
applesafariMatch4.1.1
Node
applesafariMatch5.0
OR
applesafariMatch5.0.1
Node
googleandroidRange≤2.1
OR
googleandroidMatch1.0
OR
googleandroidMatch1.1
OR
googleandroidMatch1.5
OR
googleandroidMatch1.6
OR
googleandroidMatch2.0
Node
webkitgtkwebkitgtkRange≤1.2.5
OR
webkitgtkwebkitgtkMatch1.2.0
OR
webkitgtkwebkitgtkMatch1.2.1
OR
webkitgtkwebkitgtkMatch1.2.2
OR
webkitgtkwebkitgtkMatch1.2.3
OR
webkitgtkwebkitgtkMatch1.2.4
VendorProductVersionCPE
applesafari4.0cpe:2.3:a:apple:safari:4.0:*:*:*:*:*:*:*
applesafari4.0cpe:2.3:a:apple:safari:4.0:beta:*:*:*:*:*:*
applesafari4.0.0bcpe:2.3:a:apple:safari:4.0.0b:*:*:*:*:*:*:*
applesafari4.0.1cpe:2.3:a:apple:safari:4.0.1:*:*:*:*:*:*:*
applesafari4.0.2cpe:2.3:a:apple:safari:4.0.2:*:*:*:*:*:*:*
applesafari4.0.3cpe:2.3:a:apple:safari:4.0.3:*:*:*:*:*:*:*
applesafari4.0.4cpe:2.3:a:apple:safari:4.0.4:*:*:*:*:*:*:*
applesafari4.0.5cpe:2.3:a:apple:safari:4.0.5:*:*:*:*:*:*:*
applesafari4.1cpe:2.3:a:apple:safari:4.1:*:*:*:*:*:*:*
applesafari4.1.1cpe:2.3:a:apple:safari:4.1.1:*:*:*:*:*:*:*
Rows per page:
1-10 of 241

References

Related

veracode 1
zdt 2
seebug 4
checkpoint_advisories 2
ubuntucve 1
exploitpack 2
exploitdb 2
packetstorm 2
debiancve 1
nvd 1
threatpost 2
canvas 1
cvelist 1
prion 1
android 1
nessus 13
securityvulns 2
openvas 19
freebsd 1
redhat 1
oraclelinux 1
fedora 4
gentoo 1
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:53:17
zdt
zdt
Android 2.0/2.1 Use-After-Free Remote Code Execution on Webkit
2010-11-16 00:00:00
Android 2.0-2.1 Reverse Shell Exploit
2010-11-06 00:00:00
seebug
seebug
Android 2.0/2.1 - Use-After-Free Remote Code Execution on Webkit
2014-07-01 00:00:00
Android 2.0-2.1 Reverse Shell Exploit
2010-11-05 00:00:00
Android 2.0-2.1 - Reverse Shell Exploit
2014-07-01 00:00:00
checkpoint_advisories
checkpoint_advisories
Apple Safari Webkit Use-After-Free Code Execution- Ver2 (CVE-2010-1807)
2014-01-28 00:00:00
Apple Safari Webkit Floating Point Data Type Code Execution - Ver2 (CVE-2010-1807)
2014-01-07 00:00:00
ubuntucve
ubuntucve
CVE-2010-1807
2010-09-10 00:00:00
exploitpack
exploitpack
Google Android 2.02.1 - Use-After-Free Remote Code Execution on Webkit
2010-11-15 00:00:00
Google Android 2.0 2.1 - Code Execution (Reverse Shell 10.0.2.2:2222TCP)
2010-11-05 00:00:00
exploitdb
exploitdb
Google Android 2.0 < 2.1 - Code Execution (Reverse Shell 10.0.2.2:2222/TCP)
2010-11-05 00:00:00
Google Android 2.0/2.1 - Use-After-Free Remote Code Execution on Webkit
2010-11-15 00:00:00
packetstorm
packetstorm
Android 2.0 / 2.1 Use-After-Free Remote Code Execution
2010-11-16 00:00:00
Android 2.0 / 2.1 Reverse Shell Exploit
2010-11-05 00:00:00
debiancve
debiancve
CVE-2010-1807
2010-09-10 19:00:00
nvd
nvd
CVE-2010-1807
2010-09-10 19:00:02
threatpost
threatpost
Researcher Publishes Android Browser Exploit
2010-11-08 15:26:31
Apple Plugs Safari Drive-by Download Security Holes
2010-09-08 13:57:18
canvas
canvas
Immunity Canvas: CVE_2010_1807
2010-09-10 19:00:00
cvelist
cvelist
CVE-2010-1807
2010-09-10 18:00:00
prion
prion
Design/Logic Flaw
2010-09-10 19:00:00
android
android
Use-After-Free Remote
2010-11-14 00:00:00
nessus
nessus
Mac OS X : Apple Safari < 5.0.2 / 4.1.2
2010-09-08 00:00:00
Safari < 5.0.2 Multiple Vulnerabilities
2010-09-08 00:00:00
Fedora 13 : webkitgtk-1.2.5-1.fc13 (2010-15957)
2010-10-20 00:00:00
securityvulns
securityvulns
Apple WebKit / Safari multiple security vulnerabilities
2010-09-14 00:00:00
About the security content of Safari 5.0.2 and Safari 4.1.2
2010-09-14 00:00:00
openvas
openvas
Apple Safari Multiple Vulnerabilities (Sep 2010)
2010-09-15 00:00:00
Apple Safari Multiple Vulnerabilities - Sep10
2010-09-15 00:00:00
FreeBSD Ports: webkit-gtk2
2010-11-17 00:00:00
freebsd
freebsd
Webkit-gtk2 -- Multiple Vulnabilities
2010-10-01 00:00:00
redhat
redhat
(RHSA-2011:0177) Moderate: webkitgtk security update
2011-01-25 00:00:00
oraclelinux
oraclelinux
webkitgtk security update
2011-02-10 00:00:00
fedora
fedora
[SECURITY] Fedora 13 Update: webkitgtk-1.2.5-1.fc13
2010-10-19 07:21:56
[SECURITY] Fedora 12 Update: webkitgtk-1.2.5-1.fc12
2010-10-19 07:09:06
[SECURITY] Fedora 13 Update: webkitgtk-1.2.6-1.fc13
2011-01-07 20:01:55
gentoo
gentoo
Multiple packages, Multiple vulnerabilities fixed in 2011
2014-12-11 00:00:00

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

8.9

Confidence

High

EPSS

0.922

Percentile

99.0%

JSON
Related for CVE-2010-1807
veracode1zdt2seebug4checkpoint_advisories2ubuntucve1exploitpack2exploitdb2packetstorm2debiancve1nvd1threatpost2canvas1cvelist1prion1android1nessus13securityvulns2openvas19freebsd1redhat1oraclelinux1fedora4gentoo1