CVE-2010-1417

WebKit: memory corruption vulnerability in rendering of certain CSS-styled HTML content

Published Jun 11, 2010 CVSS 2.0 · 9.3 Critical EPSS 6.6% KEV · Not listed
Description
The Cascading Style Sheets (CSS) implementation in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via HTML content that contains multiple :after pseudo-selectors.

Analysis

No analysis available yet

Remediation

No remediation available yet

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2010-1445 The Cascading Style Sheets (CSS) implementation in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via HTML content that contains multiple :after pseudo-selectors.
History
Type Values Removed Values Added
Metrics epss

{'score': 0.04688}

epss

{'score': 0.08544}

Weaknesses
  • CWE-119

    Improper Restriction of Operations within the Bounds of a Memory Buffer

Sources

Status
PUBLISHED
Assigner
apple
Published
Updated
Aug 7, 2024, 1:21 AM
Reserved
Apr 15, 2010, 12:00 AM
Status
Modified
Published
Jun 11, 2010, 6:00 PM
Modified
Jun 16, 2026, 11:18 PM
Severity
Critical
Public date
Jun 7, 2010, 12:00 AM