CVE-2010-1415

WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, does not properly handle libxml contexts, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted HTML document, related to an "API abuse issue."

Affected products

Macos X, Safari, Windows, Libxml

Apple Safari

≤ 4.0.5, 4.0, 4.0.0b, 4.0.1, 4.0.2, 4.0.3, 4.0.4

Apple Webkit

All versions

CVSS 2.0

9.3 HIGH

EPSS

6.7% (93th percentile)

Weakness

CWE-94

NVD status

Modified

Published

2010-06-11