Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2010-1807
HistorySep 10, 2010 - 7:00 p.m.

CVE-2010-1807

2010-09-1019:00:02
CWE-20
[email protected]
web.nvd.nist.gov
6

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

8.6

Confidence

High

EPSS

0.922

Percentile

99.0%

JSON

WebKit in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2; Android before 2.2; and webkitgtk before 1.2.6; does not properly validate floating-point data, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted HTML document, related to non-standard NaN representation.

Affected configurations

Nvd
Node
applesafariMatch4.0
OR
applesafariMatch4.0beta
OR
applesafariMatch4.0.0b
OR
applesafariMatch4.0.1
OR
applesafariMatch4.0.2
OR
applesafariMatch4.0.3
OR
applesafariMatch4.0.4
OR
applesafariMatch4.0.5
OR
applesafariMatch4.1
OR
applesafariMatch4.1.1
Node
applesafariMatch5.0
OR
applesafariMatch5.0.1
Node
googleandroidRange≤2.1
OR
googleandroidMatch1.0
OR
googleandroidMatch1.1
OR
googleandroidMatch1.5
OR
googleandroidMatch1.6
OR
googleandroidMatch2.0
Node
webkitgtkwebkitgtkRange≤1.2.5
OR
webkitgtkwebkitgtkMatch1.2.0
OR
webkitgtkwebkitgtkMatch1.2.1
OR
webkitgtkwebkitgtkMatch1.2.2
OR
webkitgtkwebkitgtkMatch1.2.3
OR
webkitgtkwebkitgtkMatch1.2.4
VendorProductVersionCPE
applesafari4.0cpe:2.3:a:apple:safari:4.0:*:*:*:*:*:*:*
applesafari4.0cpe:2.3:a:apple:safari:4.0:beta:*:*:*:*:*:*
applesafari4.0.0bcpe:2.3:a:apple:safari:4.0.0b:*:*:*:*:*:*:*
applesafari4.0.1cpe:2.3:a:apple:safari:4.0.1:*:*:*:*:*:*:*
applesafari4.0.2cpe:2.3:a:apple:safari:4.0.2:*:*:*:*:*:*:*
applesafari4.0.3cpe:2.3:a:apple:safari:4.0.3:*:*:*:*:*:*:*
applesafari4.0.4cpe:2.3:a:apple:safari:4.0.4:*:*:*:*:*:*:*
applesafari4.0.5cpe:2.3:a:apple:safari:4.0.5:*:*:*:*:*:*:*
applesafari4.1cpe:2.3:a:apple:safari:4.1:*:*:*:*:*:*:*
applesafari4.1.1cpe:2.3:a:apple:safari:4.1.1:*:*:*:*:*:*:*
Rows per page:
1-10 of 241

References

Related

android 1
prion 1
seebug 4
cvelist 1
veracode 1
cve 1
zdt 2
checkpoint_advisories 2
threatpost 2
exploitdb 2
packetstorm 2
canvas 1
ubuntucve 1
exploitpack 2
debiancve 1
nessus 13
openvas 19
securityvulns 2
freebsd 1
oraclelinux 1
redhat 1
fedora 4
gentoo 1
android
android
Use-After-Free Remote
2010-11-14 00:00:00
prion
prion
Design/Logic Flaw
2010-09-10 19:00:00
seebug
seebug
Android 2.0/2.1 Use-After-Free Remote Code Execution on Webkit
2010-11-17 00:00:00
Android 2.0-2.1 - Reverse Shell Exploit
2014-07-01 00:00:00
Android 2.0/2.1 - Use-After-Free Remote Code Execution on Webkit
2014-07-01 00:00:00
cvelist
cvelist
CVE-2010-1807
2010-09-10 18:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:53:17
cve
cve
CVE-2010-1807
2010-09-10 19:00:02
zdt
zdt
Android 2.0/2.1 Use-After-Free Remote Code Execution on Webkit
2010-11-16 00:00:00
Android 2.0-2.1 Reverse Shell Exploit
2010-11-06 00:00:00
checkpoint_advisories
checkpoint_advisories
Apple Safari Webkit Floating Point Data Type Code Execution - Ver2 (CVE-2010-1807)
2014-01-07 00:00:00
Apple Safari Webkit Use-After-Free Code Execution- Ver2 (CVE-2010-1807)
2014-01-28 00:00:00
threatpost
threatpost
Researcher Publishes Android Browser Exploit
2010-11-08 15:26:31
Apple Plugs Safari Drive-by Download Security Holes
2010-09-08 13:57:18
exploitdb
exploitdb
Google Android 2.0/2.1 - Use-After-Free Remote Code Execution on Webkit
2010-11-15 00:00:00
Google Android 2.0 < 2.1 - Code Execution (Reverse Shell 10.0.2.2:2222/TCP)
2010-11-05 00:00:00
packetstorm
packetstorm
Android 2.0 / 2.1 Reverse Shell Exploit
2010-11-05 00:00:00
Android 2.0 / 2.1 Use-After-Free Remote Code Execution
2010-11-16 00:00:00
canvas
canvas
Immunity Canvas: CVE_2010_1807
2010-09-10 19:00:00
ubuntucve
ubuntucve
CVE-2010-1807
2010-09-10 00:00:00
exploitpack
exploitpack
Google Android 2.02.1 - Use-After-Free Remote Code Execution on Webkit
2010-11-15 00:00:00
Google Android 2.0 2.1 - Code Execution (Reverse Shell 10.0.2.2:2222TCP)
2010-11-05 00:00:00
debiancve
debiancve
CVE-2010-1807
2010-09-10 19:00:00
nessus
nessus
Mac OS X : Apple Safari < 5.0.2 / 4.1.2
2010-09-08 00:00:00
Safari < 5.0.2 Multiple Vulnerabilities
2010-09-08 00:00:00
Fedora 13 : webkitgtk-1.2.5-1.fc13 (2010-15957)
2010-10-20 00:00:00
openvas
openvas
Apple Safari Multiple Vulnerabilities - Sep10
2010-09-15 00:00:00
Apple Safari Multiple Vulnerabilities (Sep 2010)
2010-09-15 00:00:00
FreeBSD Ports: webkit-gtk2
2010-11-17 00:00:00
securityvulns
securityvulns
About the security content of Safari 5.0.2 and Safari 4.1.2
2010-09-14 00:00:00
Apple WebKit / Safari multiple security vulnerabilities
2010-09-14 00:00:00
freebsd
freebsd
Webkit-gtk2 -- Multiple Vulnabilities
2010-10-01 00:00:00
oraclelinux
oraclelinux
webkitgtk security update
2011-02-10 00:00:00
redhat
redhat
(RHSA-2011:0177) Moderate: webkitgtk security update
2011-01-25 00:00:00
fedora
fedora
[SECURITY] Fedora 13 Update: webkitgtk-1.2.5-1.fc13
2010-10-19 07:21:56
[SECURITY] Fedora 12 Update: webkitgtk-1.2.5-1.fc12
2010-10-19 07:09:06
[SECURITY] Fedora 13 Update: webkitgtk-1.2.6-1.fc13
2011-01-07 20:01:55
gentoo
gentoo
Multiple packages, Multiple vulnerabilities fixed in 2011
2014-12-11 00:00:00

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

8.6

Confidence

High

EPSS

0.922

Percentile

99.0%

JSON
Related for NVD:CVE-2010-1807
android1prion1seebug4cvelist1veracode1cve1zdt2checkpoint_advisories2threatpost2exploitdb2packetstorm2canvas1ubuntucve1exploitpack2debiancve1nessus13openvas19securityvulns2freebsd1oraclelinux1redhat1fedora4gentoo1