20100311 Multiple Vendor WebKit HTML Element Use After Free VulnerabilityThird-party advisory
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=863 CVE-2010-0049
WebKit 1.2.x - Right-to-Left Displayed Text Handling Memory Corruption
Record summary
CVE-2010-0049 has a selected CVSS score of 9.3; EIP currently links 1 catalogued exploit.
Description
Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via HTML elements with right-to-left (RTL) text directionality.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBWebKit 1.2.x - Right-to-Left Displayed Text Handling Memory CorruptionExploitDB exploitby wushiNot analyzed1 file
References
Showing 12 of 21APPLE-SA-2010-06-21-1Vendor advisory
http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html APPLE-SA-2010-03-11-1Vendor advisory
http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html FEDORA-2010-8360Vendor advisory
http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041383.html FEDORA-2010-8379Vendor advisory
http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041432.html FEDORA-2010-8423Vendor advisory
http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041436.html SUSE-SR:2011:002Vendor advisory
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html 62942vdb entry
http://osvdb.org/62942 41856Third-party advisory
http://secunia.com/advisories/41856 43068Third-party advisory
http://secunia.com/advisories/43068 support.apple.comConfirmation
http://support.apple.com/kb/HT4070 support.apple.comConfirmation
http://support.apple.com/kb/HT4225