CVE-2010-3116

WebKit <4.1.3-5.0.3 - Use After Free

Title source: llm

Description

Multiple use-after-free vulnerabilities in WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6, allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to improper handling of MIME types by plug-ins.

References (22)

... and 2 more

Scores

EPSS 0.1045
EPSS Percentile 93.1%

Classification

CWE
CWE-416
Status draft

Affected Products (7)

google/chrome < 5.0.375.127
apple/safari < 4.1.3
apple/iphone_os < 4.2
webkitgtk/webkitgtk < 1.2.6
canonical/ubuntu_linux
canonical/ubuntu_linux
canonical/ubuntu_linux

Timeline

Published Aug 24, 2010
Tracked Since Feb 18, 2026