Lucene search
Ubuntu.comUB:CVE-2010-1806HistorySep 10, 2010 - 12:00 a.m.
CVE-2010-1806
2010-09-1000:00:00
ubuntu.com
ubuntu.com
17
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS
0.077
Percentile
94.2%
Use-after-free vulnerability in Apple Safari 4.x before 4.1.2 and 5.x
before 5.0.2 allows remote attackers to execute arbitrary code or cause a
denial of service (application crash) via run-in styling in an element,
related to object pointers.
Bugs
- <https://bugs.webkit.org/show_bug.cgi?id=41375>
- <https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-1806>
Notes
| Author | Note |
|---|---|
| jdstrand | qt4-x11 unmaintained upstream (see README.webkit for details) webkit is a fork of khtml from kdelibs. kdelibs5 is farther from it, while qt4-x11 attempts to unify khtml and webkit. |
| mdeslaur | webkitkde is a wrapper around qt4-x11’s webkit. |
| sbeattie | debian claims this is a duplicate of CVE-2010-1782 |
| mdeslaur | doesn’t appear to be a dupe of CVE-2010-1782, and isn’t present in webkit 1.2.5 |
Related
checkpoint_advisories
checkpoint_advisories
Apple Safari Webkit Use-After-Free Code Execution (CVE-2010-1806)
2010-10-03 00:00:00
zdi
zdi
Apple Safari Webkit Runin Remote Code Execution Vulnerability
2010-09-13 00:00:00
cvelist
cvelist
CVE-2010-1782
2010-07-30 20:00:00
CVE-2010-1806
2010-09-10 18:00:00
debiancve
debiancve
CVE-2010-1806
2010-09-10 19:00:00
CVE-2010-1782
2010-07-30 20:30:00
nvd
nvd
CVE-2010-1806
2010-09-10 19:00:02
CVE-2010-1782
2010-07-30 20:30:01
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:53:15
securityvulns
securityvulns
ZDI-10-170: Apple Safari Webkit Runin Remote Code Execution Vulnerability
2010-09-14 00:00:00
Apple WebKit / Safari multiple security vulnerabilities
2010-09-14 00:00:00
About the security content of Safari 5.0.2 and Safari 4.1.2
2010-09-14 00:00:00
prion
prion
Design/Logic Flaw
2010-09-10 19:00:00
Memory corruption
2010-07-30 20:30:00
cve
cve
CVE-2010-1806
2010-09-10 19:00:02
CVE-2010-1782
2010-07-30 20:30:01
ubuntucve
ubuntucve
CVE-2010-1782
2010-07-30 00:00:00
CVE-2010-1813
2010-09-09 00:00:00
nessus
nessus
Mac OS X : Apple Safari < 5.0.2 / 4.1.2
2010-09-08 00:00:00
Safari < 5.0.2 Multiple Vulnerabilities
2010-09-08 00:00:00
openSUSE Security Update : libwebkit (openSUSE-SU-2010:0666-1)
2014-06-13 00:00:00
threatpost
threatpost
Apple Plugs Safari Drive-by Download Security Holes
2010-09-08 13:57:18
openvas
openvas
Apple Safari Multiple Vulnerabilities (Sep 2010)
2010-09-15 00:00:00
Apple Safari Multiple Vulnerabilities - Sep10
2010-09-15 00:00:00
FreeBSD Ports: webkit-gtk2
2010-10-10 00:00:00
freebsd
freebsd
webkit-gtk2 -- Multiple vulnerabilities
2010-09-07 00:00:00
redhat
redhat
(RHSA-2011:0177) Moderate: webkitgtk security update
2011-01-25 00:00:00
oraclelinux
oraclelinux
webkitgtk security update
2011-02-10 00:00:00
fedora
fedora
[SECURITY] Fedora 12 Update: webkitgtk-1.2.4-1.fc12
2010-09-21 01:43:18
[SECURITY] Fedora 13 Update: webkitgtk-1.2.4-1.fc13
2010-09-15 05:40:48
[SECURITY] Fedora 13 Update: webkitgtk-1.2.5-1.fc13
2010-10-19 07:21:56
gentoo
gentoo
Multiple packages, Multiple vulnerabilities fixed in 2011
2014-12-11 00:00:00
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS
0.077
Percentile
94.2%
Related for UB:CVE-2010-1806