PT-2010-3440

CVE-2010-1807

·

Published

2010-09-10

·

Updated

2017-09-19

Description by

CVSS 2.0
9.3
High
MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Apple Safari versions 4.x through 4.1.1 Apple Safari versions 5.x through 5.0.1 Android versions prior to 2.2 webkitgtk versions prior to 1.2.6
Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted HTML document, related to improper validation of floating-point data and non-standard NaN representation.
Recommendations For Apple Safari versions 4.x through 4.1.1, update to version 4.1.2 or later. For Apple Safari versions 5.x through 5.0.1, update to version 5.0.2 or later. For Android versions prior to 2.2, update to version 2.2 or later. For webkitgtk versions prior to 1.2.6, update to version 1.2.6 or later.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
RHSA-2011:0177
RHSA-2011_0177
Found an issue in the description? Have something to add? Feel free to write us 👾