CVE-2010-1410

WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via an SVG document with nested use elements.

Affected products

Macos X, Safari, Windows

Apple Safari

≤ 4.0.5, 4.0, 4.0.0b, 4.0.1, 4.0.2, 4.0.3, 4.0.4

Apple Webkit

All versions

CVSS 2.0

9.3 HIGH

EPSS

6.9% (93th percentile)

Weakness

CWE-119

NVD status

Modified

Published

2010-06-11