PT-2010-1873 · Apple · Webkit+1

CVE-2010-0048

·

Publicado

2010-03-12

·

Atualizado

2024-10-15

CVSS v2.0

9.3

Alta

VetorAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 4.0.5
Description The issue is related to a use-after-free vulnerability in WebKit, allowing remote attackers to execute arbitrary code or cause a denial of service, resulting in an application crash. This can be achieved via a crafted XML document.
Recommendations For versions prior to 4.0.5, update to version 4.0.5 or later to resolve the issue. As a temporary workaround, consider avoiding the use of crafted XML documents in Apple Safari until the update is applied.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2010-0048
ZDI-10-146

Produtos afetados

Safari
Webkit