NetSight
IP …
critical10.0Public exploit code

CVE-2010-1119

Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, Safari before 4.1 on Mac OS X 10.4, and Safari on …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, Safari before 4.1 on Mac OS X 10.4, and Safari on Apple iPhone OS allows remote attackers to execute arbitrary code or cause a denial of service (application crash), or read the SMS database or other data, via vectors related to "attribute manipulation," as demonstrated by Vincenzo Iozzo and Ralf Philipp Weinmann during a Pwn2Own competition at CanSecWest 2010.

Affected products

VendorProductAffected versions
AppleSafari
through 4.0.5
Versions 1.0, 1.0.0, 1.0.0b1, 1.0.0b2, 1.0.1
AppleMac Os X
Versions 10.5, 10.5.0, 10.5.1, 10.5.2, 10.5.3, 10.5.4
AppleMac Os X Server
Versions 10.5.0, 10.5.1, 10.5.2, 10.5.3, 10.5.4, 10.5.5
AppleIphone Os
Versions 2.0, 2.0.0, 2.0.1, 2.0.2, 2.1, 2.1.1

Weakness classification

CWE-399

References