CVE-2010-1415

WebKit: API abuse vulnerability in handling of libxml contexts

Published Jun 11, 2010 CVSS 2.0 · 9.3 Critical EPSS 6.7% KEV · Not listed
Description
WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, does not properly handle libxml contexts, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted HTML document, related to an "API abuse issue."

Analysis

No analysis available yet

Remediation

No remediation available yet

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History

No history.

Weaknesses
  • CWE-94

    Improper Control of Generation of Code ('Code Injection')

Sources

Status
PUBLISHED
Assigner
apple
Published
Updated
Aug 7, 2024, 1:21 AM
Reserved
Apr 15, 2010, 12:00 AM
Status
Modified
Published
Jun 11, 2010, 6:00 PM
Modified
Jun 16, 2026, 11:18 PM
Severity
Public date
Jun 7, 2010, 12:00 AM