CVE-2010-1029

medium · 5

Stack consumption vulnerability in the WebCore::CSSSelector function in WebKit, as used in Apple Safari 4.0.4, Apple Safari on iPhone OS and iPhone OS for iPod touch, and Google Chrome 4.0.249, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a STYLE element composed of a large number of *> sequences.

CVSS

10.4%

EPSS (exploit prob.)

96th

EPSS percentile

2010-03-19

Published

AV:N/AC:L/Au:N/C:N/I:N/A:P

Weaknesses

CWE-399

Affected products

Vendor	Product	Affected versions
apple	safari	4.0.4
google	chrome	4.0.249.0
apple	safari	all versions
apple	iphone_os	all versions
apple	iphone_os	1.0
apple	iphone_os	1.0.0
apple	iphone_os	1.0.1
apple	iphone_os	1.0.1
apple	iphone_os	1.0.2
apple	iphone_os	1.0.2
apple	iphone_os	1.1
apple	iphone_os	1.1.0
apple	iphone_os	1.1.0
apple	iphone_os	1.1.0
apple	iphone_os	1.1.1
apple	iphone_os	1.1.1
apple	iphone_os	1.1.2
apple	iphone_os	1.1.2
apple	iphone_os	1.1.2
apple	iphone_os	1.1.3
apple	iphone_os	1.1.3
apple	iphone_os	1.1.3
apple	iphone_os	1.1.4
apple	iphone_os	1.1.4
apple	iphone_os	1.1.4
apple	iphone_os	1.1.5
apple	iphone_os	1.1.5
apple	iphone_os	1.1.5
apple	iphone_os	2.0
apple	iphone_os	2.0.0
apple	iphone_os	2.0.0
apple	iphone_os	2.0.0
apple	iphone_os	2.0.1
apple	iphone_os	2.0.1
apple	iphone_os	2.0.1
apple	iphone_os	2.0.2
apple	iphone_os	2.0.2
apple	iphone_os	2.0.2
apple	iphone_os	2.1
apple	iphone_os	2.1

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2010-1029