QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2010-1119

Back to search

CVE-2010-1119

Published: Mar 25, 2010

Modified: Aug 7, 2024

PUBLISHED

Description

Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, Safari before 4.1 on Mac OS X 10.4, and Safari on Apple iPhone OS allows remote attackers to execute arbitrary code or cause a denial of service (application crash), or read the SMS database or other data, via vectors related to "attribute manipulation," as demonstrated by Vincenzo Iozzo and Ralf Philipp Weinmann during a Pwn2Own competition at CanSecWest 2010.

VendorProductVersions

n/a

n/a

affected
n/a

References

APPLE-SA-2010-06-07-1
vendor-advisory
x_refsource_APPLE
40196
third-party-advisory
x_refsource_SECUNIA
40105
third-party-advisory
x_refsource_SECUNIA
ADV-2010-1373
vdb-entry
x_refsource_VUPEN
APPLE-SA-2010-06-16-1
vendor-advisory
x_refsource_APPLE
ADV-2010-1512
vdb-entry
x_refsource_VUPEN
40620
vdb-entry
x_refsource_BID
oval:org.mitre.oval:def:7037
vdb-entry
signature
x_refsource_OVAL
8128
third-party-advisory
x_refsource_SREASON
1024067
vdb-entry
x_refsource_SECTRACK
APPLE-SA-2010-06-21-1
vendor-advisory
x_refsource_APPLE

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now