CVE-2010-0050

Published: Mar 15, 2010Modified: Apr 29, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an HTML document with improperly nested tags.

Affected (10)

Products: Apple: Iphone Os, Safari · Fedoraproject: Fedora · Canonical: Ubuntu Linux · +1 more

Show all products

Apple: Iphone Os, Safari · Fedoraproject: Fedora · Canonical: Ubuntu Linux · Opensuse: Opensuse

2 products

1 product

1 product

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Apple Iphone Os	From 2.0 to 4.0
Apple Safari	Before 4.0.5

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 11
Fedoraproject Fedora	Version 12
Fedoraproject Fedora	Version 13

Configuration C

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 10.04
Canonical Ubuntu Linux	Version 10.10
Canonical Ubuntu Linux	Version 9.10

Configuration D

2 vulnerable

Vulnerable Software	Affected Versions
Opensuse Opensuse	Version 11.2
Opensuse Opensuse	Version 11.3

Related CWEs

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

References (38)

http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html

Source: product-security@apple.com

Mailing List

http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html

Source: product-security@apple.com

Mailing ListVendor Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041383.html

Source: product-security@apple.com

Mailing List

http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041432.html

Source: product-security@apple.com

Mailing List

http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041436.html

Source: product-security@apple.com

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html

Source: product-security@apple.com

Mailing List

http://secunia.com/advisories/41856

Source: product-security@apple.com

Broken Link

http://secunia.com/advisories/43068

Source: product-security@apple.com

Broken Link

http://support.apple.com/kb/HT4070

Source: product-security@apple.com

Vendor Advisory

http://support.apple.com/kb/HT4225

Source: product-security@apple.com

Vendor Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2011:039

Source: product-security@apple.com

Broken Link

http://www.securityfocus.com/bid/38671

Source: product-security@apple.com

Broken LinkPatchThird Party AdvisoryVDB Entry

http://www.securitytracker.com/id?1023708

Source: product-security@apple.com

Broken LinkThird Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-1006-1

Source: product-security@apple.com

Third Party Advisory

http://www.vupen.com/english/advisories/2010/2722

Source: product-security@apple.com

Broken Link

http://www.vupen.com/english/advisories/2011/0212

Source: product-security@apple.com

Broken Link

http://www.vupen.com/english/advisories/2011/0552

Source: product-security@apple.com

Broken Link

https://exchange.xforce.ibmcloud.com/vulnerabilities/56836

Source: product-security@apple.com

Third Party AdvisoryVDB Entry

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7587

Source: product-security@apple.com

Broken Link

http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListVendor Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041383.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041432.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041436.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

http://secunia.com/advisories/41856

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://secunia.com/advisories/43068

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://support.apple.com/kb/HT4070

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://support.apple.com/kb/HT4225

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2011:039

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://www.securityfocus.com/bid/38671

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkPatchThird Party AdvisoryVDB Entry

http://www.securitytracker.com/id?1023708

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkThird Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-1006-1

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.vupen.com/english/advisories/2010/2722

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://www.vupen.com/english/advisories/2011/0212

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://www.vupen.com/english/advisories/2011/0552

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

https://exchange.xforce.ibmcloud.com/vulnerabilities/56836

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7587

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

Timeline

No history available yet.