NetSight
critical9.3Public exploit code

CVE-2010-0049

Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service (application…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via HTML elements with right-to-left (RTL) text directionality.

Affected products

VendorProductAffected versions
AppleSafari
through 4.0.4
Versions 4.0, 4.0.0b, 4.0.1, 4.0.2, 4.0.3

Weakness classification

References