CVE-2010-0050

HIGH

Apple Safari < 4.0.5 - Use After Free

Title source: rule

Description

Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an HTML document with improperly nested tags.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Dr_IDE · htmldoswindows
https://www.exploit-db.com/exploits/12425

References (19)

Scores

CVSS v3 8.8
EPSS 0.4637
EPSS Percentile 97.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-416
Status published
Products (10)
apple/iphone_os 2.0 - 4.0
apple/safari < 4.0.5
canonical/ubuntu_linux 9.10
canonical/ubuntu_linux 10.04
canonical/ubuntu_linux 10.10
fedoraproject/fedora 11
fedoraproject/fedora 12
fedoraproject/fedora 13
opensuse/opensuse 11.2
opensuse/opensuse 11.3
Published Mar 15, 2010
Tracked Since Feb 18, 2026