Lucene search
RootSSV:20018HistoryAug 10, 2010 - 12:00 a.m.
Apple Safari Webkit foreignObject元素释放后使用漏洞
2010-08-1000:00:00
Root
www.seebug.org
20
EPSS
0.26
Percentile
96.7%
BUGTRAQ ID: 42046
CVE ID: CVE-2010-1786
Safari是苹果家族机器操作系统中默认捆绑的WEB浏览器。
Safari的Webkit对用于将外部文档嵌入到SVG名称空间的特殊标签的布局实现中存在漏洞。之后在尝试计算用于渲染标签内容的布局信息时，可能会访问之前已被释放的linebox，导致执行任意代码。
Apple Safari 5.x
Apple Safari 4.x
厂商补丁：
Apple
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：
Related
prion
prion
Design/Logic Flaw
2010-07-30 20:30:00
cvelist
cvelist
CVE-2010-1786
2010-07-30 20:00:00
ubuntucve
ubuntucve
CVE-2010-1786
2010-07-30 00:00:00
nvd
nvd
CVE-2010-1786
2010-07-30 20:30:02
zdi
zdi
securityvulns
securityvulns
ZDI-10-141: Apple Webkit SVG ForeignObject Rendering Layout Remote Code Execution Vulnerability
2010-08-08 00:00:00
Apple Webkit / Safari multiple security vulnerabilities
2010-08-14 00:00:00
About the security content of Safari 5.0.1 and Safari 4.1.1
2010-08-08 00:00:00
debiancve
debiancve
CVE-2010-1786
2010-07-30 20:30:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:53:16
cve
cve
CVE-2010-1786
2010-07-30 20:30:02
nessus
nessus
openSUSE Security Update : libwebkit (openSUSE-SU-2010:0666-1)
2014-06-13 00:00:00
FreeBSD : webkit-gtk2 -- Multiple vulnerabilities (9bcfd7b6-bcda-11df-9a6a-0015f2db7bde)
2010-09-12 00:00:00
Safari < 4.1.1 / 5.0.1 Multiple Vulnerabilities
2010-07-28 00:00:00
openvas
openvas
FreeBSD Ports: webkit-gtk2
2010-10-10 00:00:00
FreeBSD Ports: webkit-gtk2
2010-10-10 00:00:00
Apple Safari Multiple Vulnerabilities (Jul 2010)
2010-08-02 00:00:00
freebsd
freebsd
webkit-gtk2 -- Multiple vulnerabilities
2010-09-07 00:00:00
oraclelinux
oraclelinux
webkitgtk security update
2011-02-10 00:00:00
redhat
redhat
(RHSA-2011:0177) Moderate: webkitgtk security update
2011-01-25 00:00:00
fedora
fedora
[SECURITY] Fedora 12 Update: webkitgtk-1.2.4-1.fc12
2010-09-21 01:43:18
[SECURITY] Fedora 13 Update: webkitgtk-1.2.4-1.fc13
2010-09-15 05:40:48
[SECURITY] Fedora 13 Update: webkitgtk-1.2.5-1.fc13
2010-10-19 07:21:56
gentoo
gentoo
Multiple packages, Multiple vulnerabilities fixed in 2011
2014-12-11 00:00:00