CVE-2010-1807

Published: Sep 10, 2010Modified: Apr 29, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

WebKit in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2; Android before 2.2; and webkitgtk before 1.2.6; does not properly validate floating-point data, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted HTML document, related to non-standard NaN representation.

Affected (24)

Products: Apple: Safari · Google: Android · Webkitgtk: Webkitgtk

1 product

1 product

1 product

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Apple Safari	Version 4.0.0b
Apple Safari	Version 4.0.1
Apple Safari	Version 4.0.2
Apple Safari	Version 4.0.3
Apple Safari	Version 4.0.4
Apple Safari	Version 4.0.5
Apple Safari	Version 4.0
Apple Safari	Version 4.0 beta
Apple Safari	Version 4.1.1
Apple Safari	Version 4.1

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Apple Safari	Version 5.0.1
Apple Safari	Version 5.0

Configuration C

6 vulnerable

Vulnerable Software	Affected Versions
Google Android	Up to 2.1
Google Android	Version 1.0
Google Android	Version 1.1
Google Android	Version 1.5
Google Android	Version 1.6
Google Android	Version 2.0

Configuration D

6 vulnerable

Vulnerable Software	Affected Versions
Webkitgtk Webkitgtk	Up to 1.2.5
Webkitgtk Webkitgtk	Version 1.2.0
Webkitgtk Webkitgtk	Version 1.2.1
Webkitgtk Webkitgtk	Version 1.2.2
Webkitgtk Webkitgtk	Version 1.2.3
Webkitgtk Webkitgtk	Version 1.2.4

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (44)

http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html

Source: product-security@apple.com

http://lists.apple.com/archives/security-announce/2010//Sep/msg00001.html

Source: product-security@apple.com

Vendor Advisory

http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html

Source: product-security@apple.com

http://secunia.com/advisories/41856

Source: product-security@apple.com

Vendor Advisory

http://secunia.com/advisories/42314

Source: product-security@apple.com

http://secunia.com/advisories/43068

Source: product-security@apple.com

Vendor Advisory

http://secunia.com/advisories/43086

Source: product-security@apple.com

Vendor Advisory

http://support.apple.com/kb/HT4333

Source: product-security@apple.com

Vendor Advisory

http://support.apple.com/kb/HT4456

Source: product-security@apple.com

http://trac.webkit.org/changeset/64706

Source: product-security@apple.com

http://www.computerworld.com/s/article/9195058/Researcher_to_release_Web_based_Android_attack

Source: product-security@apple.com

http://www.mandriva.com/security/advisories?name=MDVSA-2011:039

Source: product-security@apple.com

http://www.redhat.com/support/errata/RHSA-2011-0177.html

Source: product-security@apple.com

http://www.securityfocus.com/bid/43047

Source: product-security@apple.com

Patch

http://www.ubuntu.com/usn/USN-1006-1

Source: product-security@apple.com

http://www.vupen.com/english/advisories/2010/2722

Source: product-security@apple.com

Vendor Advisory

http://www.vupen.com/english/advisories/2010/3046

Source: product-security@apple.com

Vendor Advisory

http://www.vupen.com/english/advisories/2011/0212

Source: product-security@apple.com

Vendor Advisory

http://www.vupen.com/english/advisories/2011/0216

Source: product-security@apple.com

Vendor Advisory

http://www.vupen.com/english/advisories/2011/0552

Source: product-security@apple.com

Vendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=627703

Source: product-security@apple.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11964

Source: product-security@apple.com

http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.apple.com/archives/security-announce/2010//Sep/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/41856

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/42314

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/43068

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/43086

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://support.apple.com/kb/HT4333

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://support.apple.com/kb/HT4456

Source: af854a3a-2127-422b-91ae-364da2661108

http://trac.webkit.org/changeset/64706

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.computerworld.com/s/article/9195058/Researcher_to_release_Web_based_Android_attack

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2011:039

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2011-0177.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/43047

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.ubuntu.com/usn/USN-1006-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2010/2722

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.vupen.com/english/advisories/2010/3046

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.vupen.com/english/advisories/2011/0212

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.vupen.com/english/advisories/2011/0216

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.vupen.com/english/advisories/2011/0552

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=627703

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11964

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.