CVE-2011-3443

Safari < 5.0.6 - Use-After-Free via CSS @font-face Rule List Management

Title source: llm

Description

Use-after-free vulnerability in WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and application crash) via vectors related to improper list management for Cascading Style Sheets (CSS) @font-face rules.

References (2)

Core 2

Core References

Vendor Advisory x_refsource_confirm

http://support.apple.com/kb/HT4808

Various Sources third-party-advisory x_refsource_idefense

http://www.verisigninc.com/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=962

Scores

EPSS 0.0200

EPSS Percentile 78.7%

Details

CWE

CWE-399

Status published

Products (34)

apple/safari 1.0 (3 CPE variants)

apple/safari 1.0.0

apple/safari 1.0.0b1

apple/safari 1.0.0b2

apple/safari 1.0.1

apple/safari 1.0.2

apple/safari 1.0.3 (3 CPE variants)

apple/safari 1.0b1

apple/safari 1.1

apple/safari 1.1.0

... and 24 more

Published Mar 02, 2012

Tracked Since Feb 18, 2026