Lucene search

K
cve[email protected]CVE-2010-3257
HistorySep 07, 2010 - 6:00 p.m.

CVE-2010-3257

2010-09-0718:00:02
CWE-416
web.nvd.nist.gov
29
cve-2010-3257
webkit
vulnerability
remote code execution
dos
element focus

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

9 High

AI Score

Confidence

High

0.047 Low

EPSS

Percentile

92.7%

Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 6.0.472.53, and webkitgtk before 1.2.6, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving element focus.

Affected configurations

NVD
Node
googlechromeRange<6.0.472.53
Node
webkitgtkwebkitgtkRange<1.2.6
Node
applesafariRange<4.1.3
OR
applesafariRange5.05.0.3
OR
appleiphone_osRange<4.2
Node
canonicalubuntu_linuxMatch9.10
OR
canonicalubuntu_linuxMatch10.04-
OR
canonicalubuntu_linuxMatch10.10
CPENameOperatorVersion
google:chromegoogle chromelt6.0.472.53

References

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

9 High

AI Score

Confidence

High

0.047 Low

EPSS

Percentile

92.7%