CVE-2010-1793

Multiple use-after-free vulnerabilities in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a (1) font-face or (2) use element in an SVG document.

Affected products

Macos X, Red Hat, Safari, Windows, Webkitgtk

Apple Safari

≤ 5.0, 4.0, 4.0.0b, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.5

Apple Webkit

All versions

CVSS 2.0

9.3 HIGH

EPSS

6.7% (93th percentile)

Weakness

CWE-399

NVD status

Modified

Published

2010-07-30