CVE-2010-3257

WebKit <4.1.3-5.0.3 - Use After Free

Title source: llm

Description

Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 6.0.472.53, and webkitgtk before 1.2.6, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving element focus.

References (21)

... and 1 more

Scores

EPSS 0.1034
EPSS Percentile 93.1%

Classification

CWE
CWE-416
Status draft

Affected Products (7)

google/chrome < 6.0.472.53
webkitgtk/webkitgtk < 1.2.6
apple/safari < 4.1.3
apple/iphone_os < 4.2
canonical/ubuntu_linux
canonical/ubuntu_linux
canonical/ubuntu_linux

Timeline

Published Sep 07, 2010
Tracked Since Feb 18, 2026