NetSight
IP …
medium6.8

CVE-2011-1344

Use-after-free vulnerability in WebKit, as used in Apple Safari before 5.0.5; iOS before 4.3.2 for iPhone, iPod, and iPad; iOS before 4.2.7 for iPhone 4 (CDMA)…

Impact

Use-after-free vulnerability in WebKit, as used in Apple Safari before 5.0.5; iOS before 4.3.2 for iPhone, iPod, and iPad; iOS before 4.2.7 for iPhone 4 (CDMA); and possibly other products allows remote attackers to execute arbitrary code by adding children to a WBR tag and then removing the tag, related to text nodes, as demonstrated by Chaouki Bekrar during a Pwn2Own competition at CanSecWest 2011.

Affected products

VendorProductAffected versions
AppleSafari
through 5.0.4
Versions 1.0, 1.0.0, 1.0.0b1, 1.0.0b2, 1.0.1
AppleIphone Os
through 4.3.1
Versions 1.0.0, 1.0.1, 1.0.2, 1.1.0, 1.1.1

Weakness classification

CWE-399

References