NetSight
IP …
critical9.3

CVE-2010-1402

Double free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attack…

Impact

Double free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to an event listener in an SVG document, related to duplicate event listeners, a timer, and an AnimateTransform object.

Affected products

VendorProductAffected versions
AppleSafari
through 4.0.5
Versions 4.0, 4.0.0b, 4.0.1, 4.0.2, 4.0.3
AppleWebkit
All versions

Weakness classification

CWE-399

References