NetSight
IP …
critical9.3Public exploit code

CVE-2010-1807

WebKit in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2; Android before 2.2; and webkitgtk before 1.2.6; does not properly validate floating-point data, w…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

WebKit in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2; Android before 2.2; and webkitgtk before 1.2.6; does not properly validate floating-point data, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted HTML document, related to non-standard NaN representation.

Affected products

VendorProductAffected versions
AppleSafari
Versions 4.0, 4.0.0b, 4.0.1, 4.0.2, 4.0.3, 4.0.4
GoogleAndroid
through 2.1
Versions 1.0, 1.1, 1.5, 1.6, 2.0
WebkitgtkWebkitgtk
through 1.2.5
Versions 1.2.0, 1.2.1, 1.2.2, 1.2.3, 1.2.4

Weakness classification

CWE-20

References