WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, Apple Safari before 4.1 on Mac OS X 10.4, and Google Chrome before 5.0.375.70 does not properly handle a transformation of a text node that has the IBM1147 character set, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document containing a BR element, related to a "type checking issue."

Project Subscriptions

Vendors Products
Mac Os X Subscribe
Mac Os X Server Subscribe
Canonical Subscribe
Ubuntu Linux Subscribe
Microsoft Subscribe
Windows 7 Subscribe
Windows Vista Subscribe
Windows Xp Subscribe
Opensuse Subscribe
Opensuse Subscribe
Suse Linux Enterprise Desktop Subscribe
Suse Linux Enterprise Server Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

References
Link Providers
http://code.google.com/p/chromium/issues/detail?id=43487 cve-icon cve-icon
http://googlechromereleases.blogspot.com/2010/06/stable-channel-update.html cve-icon cve-icon
http://lists.apple.com/archives/security-announce/2010//Jun/msg00002.html cve-icon cve-icon
http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html cve-icon cve-icon
http://lists.apple.com/archives/security-announce/2010//Sep/msg00002.html cve-icon cve-icon
http://lists.apple.com/archives/security-announce/2010/Jun/msg00000.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html cve-icon cve-icon
http://secunia.com/advisories/40072 cve-icon cve-icon
http://secunia.com/advisories/40105 cve-icon cve-icon
http://secunia.com/advisories/40196 cve-icon cve-icon
http://secunia.com/advisories/41856 cve-icon cve-icon
http://secunia.com/advisories/42314 cve-icon cve-icon
http://secunia.com/advisories/43068 cve-icon cve-icon
http://securitytracker.com/id?1024067 cve-icon cve-icon
http://support.apple.com/kb/HT4196 cve-icon cve-icon
http://support.apple.com/kb/HT4220 cve-icon cve-icon
http://support.apple.com/kb/HT4334 cve-icon cve-icon
http://support.apple.com/kb/HT4456 cve-icon cve-icon
http://www.mandriva.com/security/advisories?name=MDVSA-2011:039 cve-icon cve-icon
http://www.securityfocus.com/bid/40620 cve-icon cve-icon
http://www.ubuntu.com/usn/USN-1006-1 cve-icon cve-icon
http://www.vupen.com/english/advisories/2010/1373 cve-icon cve-icon
http://www.vupen.com/english/advisories/2010/1512 cve-icon cve-icon
http://www.vupen.com/english/advisories/2010/2722 cve-icon cve-icon
http://www.vupen.com/english/advisories/2011/0212 cve-icon cve-icon
http://www.vupen.com/english/advisories/2011/0552 cve-icon cve-icon
http://zerodayinitiative.com/advisories/ZDI-10-093/ cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2010-1770 cve-icon
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7099 cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2010-1770 cve-icon
History

Sun, 13 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.10786}

epss

{'score': 0.0902}


Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2024-08-07T01:35:53.736Z

Reserved: 2010-05-06T00:00:00

Link: CVE-2010-1770

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2010-06-11T19:30:20.440

Modified: 2025-04-11T00:51:21.963

Link: CVE-2010-1770

cve-icon Redhat

Severity : Critical

Publid Date: 2010-06-07T00:00:00Z

Links: CVE-2010-1770 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses