PT-2010-1873 · Apple · Webkit+1

CVE-2010-0048

·

Published

2010-03-12

·

Updated

2024-10-15

CVSS v2.0

9.3

High

VectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 4.0.5
Description The issue is related to a use-after-free vulnerability in WebKit, allowing remote attackers to execute arbitrary code or cause a denial of service, resulting in an application crash. This can be achieved via a crafted XML document.
Recommendations For versions prior to 4.0.5, update to version 4.0.5 or later to resolve the issue. As a temporary workaround, consider avoiding the use of crafted XML documents in Apple Safari until the update is applied.

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2010-0048
ZDI-10-146

Affected Products

Safari
Webkit