CVE-2010-1404

Safari < 5.0 - Use-After-Free via SVG Recursive Use Elements

Title source: llm
STIX 2.1

Description

Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an SVG document that contains recursive Use elements, which are not properly handled during page deconstruction.

References (23)

Core 23
Core References
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2011:039
Vendor Advisory x_refsource_confirm
http://support.apple.com/kb/HT4220
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2010/2722
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/43068
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-1006-1
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/41856
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2011/0212
Vendor Advisory x_refsource_confirm
http://support.apple.com/kb/HT4225
Patch, Vendor Advisory vendor-advisory x_refsource_apple
http://lists.apple.com/archives/security-announce/2010/Jun/msg00000.html
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/40196
Third Party Advisory x_refsource_misc
http://www.zerodayinitiative.com/advisories/ZDI-10-096
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/40105
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7497
Patch, Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2010/1373
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/511718/100/0/threaded
Vendor Advisory vendor-advisory x_refsource_apple
http://lists.apple.com/archives/security-announce/2010//Jun/msg00002.html
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2010/1512
Patch vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/40620
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2011/0552
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1024067
Vendor Advisory x_refsource_confirm
http://support.apple.com/kb/HT4196
Vendor Advisory vendor-advisory x_refsource_apple
http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html

Scores

EPSS 0.0873
EPSS Percentile 94.6%

Details

CWE
CWE-399
Status published
Products (8)
apple/safari 4.0
apple/safari 4.0.0b
apple/safari 4.0.1
apple/safari 4.0.2
apple/safari 4.0.3
apple/safari 4.0.4
apple/safari < 4.0.5
apple/webkit
Published Jun 11, 2010
Tracked Since Feb 18, 2026