Evil-DB LogoEvil-DB
← All CVEs

CVE-2010-1119

high · 10

Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, Safari before 4.1 on Mac OS X 10.4, and Safari on Apple iPhone OS allows remote attackers to execute arbitrary code or cause a denial of service (application crash), or read the SMS database or other data, via vectors related to "attribute manipulation," as demonstrated by Vincenzo Iozzo and Ralf Philipp Weinmann during a Pwn2Own competition at CanSecWest 2010.

10
CVSS
19.0%
EPSS (exploit prob.)
97th
EPSS percentile
2010-03-25
Published

AV:N/AC:L/Au:N/C:C/I:C/A:C

Weaknesses

CWE-399

Affected products

VendorProductAffected versions
applesafari<= 4.0.5
applesafari1.0
applesafari1.0
applesafari1.0
applesafari1.0.0
applesafari1.0.0b1
applesafari1.0.0b2
applesafari1.0.1
applesafari1.0.2
applesafari1.0.3
applesafari1.0.3
applesafari1.0.3
applesafari1.1
applesafari1.1.0
applesafari1.1.1
applesafari1.2
applesafari1.2.0
applesafari1.2.1
applesafari1.2.2
applesafari1.2.3
applesafari1.2.4
applesafari1.2.5
applesafari1.3
applesafari1.3.0
applesafari1.3.1
applesafari1.3.2
applesafari1.3.2
applesafari1.3.2
applesafari2
applesafari2.0
applesafari2.0.0
applesafari2.0.1
applesafari2.0.2
applesafari2.0.3
applesafari2.0.3
applesafari2.0.3
applesafari2.0.3
applesafari2.0.3
applesafari2.0.4
applesafari3

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2010-1119