Lucene search
Ubuntu.comUB:CVE-2010-1807HistorySep 10, 2010 - 12:00 a.m.
CVE-2010-1807
2010-09-1000:00:00
ubuntu.com
ubuntu.com
41
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS
0.922
Percentile
99.0%
WebKit in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2; Android
before 2.2; and webkitgtk before 1.2.6; does not properly validate
floating-point data, which allows remote attackers to execute arbitrary
code or cause a denial of service (application crash) via a crafted HTML
document, related to non-standard NaN representation.
Bugs
Notes
| Author | Note |
|---|---|
| jdstrand | qt4-x11 unmaintained upstream (see README.webkit for details) webkit is a fork of khtml from kdelibs. kdelibs5 is farther from it, while qt4-x11 attempts to unify khtml and webkit. |
| mdeslaur | webkitkde is a wrapper around qt4-x11’s webkit. |
Related
cvelist
cvelist
CVE-2010-1807
2010-09-10 18:00:00
seebug
seebug
Android 2.0-2.1 - Reverse Shell Exploit
2014-07-01 00:00:00
Android 2.0/2.1 Use-After-Free Remote Code Execution on Webkit
2010-11-17 00:00:00
Android 2.0/2.1 - Use-After-Free Remote Code Execution on Webkit
2014-07-01 00:00:00
prion
prion
Design/Logic Flaw
2010-09-10 19:00:00
android
android
Use-After-Free Remote
2010-11-14 00:00:00
zdt
zdt
Android 2.0/2.1 Use-After-Free Remote Code Execution on Webkit
2010-11-16 00:00:00
Android 2.0-2.1 Reverse Shell Exploit
2010-11-06 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:53:17
cve
cve
CVE-2010-1807
2010-09-10 19:00:02
checkpoint_advisories
checkpoint_advisories
exploitdb
exploitdb
Google Android 2.0/2.1 - Use-After-Free Remote Code Execution on Webkit
2010-11-15 00:00:00
nvd
nvd
CVE-2010-1807
2010-09-10 19:00:02
threatpost
threatpost
Researcher Publishes Android Browser Exploit
2010-11-08 15:26:31
Apple Plugs Safari Drive-by Download Security Holes
2010-09-08 13:57:18
exploitpack
exploitpack
Google Android 2.02.1 - Use-After-Free Remote Code Execution on Webkit
2010-11-15 00:00:00
Google Android 2.0 2.1 - Code Execution (Reverse Shell 10.0.2.2:2222TCP)
2010-11-05 00:00:00
packetstorm
packetstorm
Android 2.0 / 2.1 Use-After-Free Remote Code Execution
2010-11-16 00:00:00
Android 2.0 / 2.1 Reverse Shell Exploit
2010-11-05 00:00:00
debiancve
debiancve
CVE-2010-1807
2010-09-10 19:00:00
canvas
canvas
Immunity Canvas: CVE_2010_1807
2010-09-10 19:00:00
nessus
nessus
Mac OS X : Apple Safari < 5.0.2 / 4.1.2
2010-09-08 00:00:00
Safari < 5.0.2 Multiple Vulnerabilities
2010-09-08 00:00:00
Fedora 13 : webkitgtk-1.2.5-1.fc13 (2010-15957)
2010-10-20 00:00:00
openvas
openvas
Apple Safari Multiple Vulnerabilities (Sep 2010)
2010-09-15 00:00:00
Apple Safari Multiple Vulnerabilities - Sep10
2010-09-15 00:00:00
FreeBSD Ports: webkit-gtk2
2010-11-17 00:00:00
securityvulns
securityvulns
Apple WebKit / Safari multiple security vulnerabilities
2010-09-14 00:00:00
About the security content of Safari 5.0.2 and Safari 4.1.2
2010-09-14 00:00:00
freebsd
freebsd
Webkit-gtk2 -- Multiple Vulnabilities
2010-10-01 00:00:00
redhat
redhat
(RHSA-2011:0177) Moderate: webkitgtk security update
2011-01-25 00:00:00
oraclelinux
oraclelinux
webkitgtk security update
2011-02-10 00:00:00
fedora
fedora
[SECURITY] Fedora 13 Update: webkitgtk-1.2.5-1.fc13
2010-10-19 07:21:56
[SECURITY] Fedora 12 Update: webkitgtk-1.2.5-1.fc12
2010-10-19 07:09:06
[SECURITY] Fedora 13 Update: webkitgtk-1.2.6-1.fc13
2011-01-07 20:01:55
gentoo
gentoo
Multiple packages, Multiple vulnerabilities fixed in 2011
2014-12-11 00:00:00
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS
0.922
Percentile
99.0%
Related for UB:CVE-2010-1807