CVE-2010-1790

WebKit: multiple vulnerabilities in WebKitGTK

Published Jul 30, 2010 CVSS 2.0 · 9.3 Critical EPSS 6.1% KEV · Not listed
Description
WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; does not properly handle just-in-time (JIT) compiled JavaScript stubs, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted HTML document, related to a "reentrancy issue."

Analysis

No analysis available yet

Remediation

No remediation available yet

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2010-1810 WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; does not properly handle just-in-time (JIT) compiled JavaScript stubs, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted HTML document, related to a "reentrancy issue."
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
apple
Published
Updated
Aug 7, 2024, 1:35 AM
Reserved
May 6, 2010, 12:00 AM
Status
Modified
Published
Jul 30, 2010, 8:30 PM
Modified
Jun 16, 2026, 11:19 PM
Severity
Moderate
Public date
Aug 11, 2010, 12:00 AM