CVE-2010-1759

high · 9.3

Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to the Node.normalize method.

9.3

CVSS

15.7%

EPSS (exploit prob.)

97th

EPSS percentile

2010-06-11

Published

AV:N/AC:M/Au:N/C:C/I:C/A:C

Weaknesses

CWE-399

Affected products

Vendor	Product	Affected versions
apple	safari	<= 4.0.5
apple	safari	4.0
apple	safari	4.0.0b
apple	safari	4.0.1
apple	safari	4.0.2
apple	safari	4.0.3
apple	safari	4.0.4
apple	webkit	all versions
apple	mac_os_x	10.5
apple	mac_os_x	10.5.0
apple	mac_os_x	10.5.1
apple	mac_os_x	10.5.2
apple	mac_os_x	10.5.3
apple	mac_os_x	10.5.4
apple	mac_os_x	10.5.5
apple	mac_os_x	10.5.6
apple	mac_os_x	10.5.7
apple	mac_os_x	10.5.8
apple	mac_os_x	10.6.0
apple	mac_os_x	10.6.1
apple	mac_os_x	10.6.2
apple	mac_os_x	10.6.3
apple	mac_os_x_server	10.5
apple	mac_os_x_server	10.5.0
apple	mac_os_x_server	10.5.1
apple	mac_os_x_server	10.5.2
apple	mac_os_x_server	10.5.3
apple	mac_os_x_server	10.5.4
apple	mac_os_x_server	10.5.5
apple	mac_os_x_server	10.5.6
apple	mac_os_x_server	10.5.7
apple	mac_os_x_server	10.5.8
apple	mac_os_x_server	10.6.0
apple	mac_os_x_server	10.6.1
apple	mac_os_x_server	10.6.2
apple	mac_os_x_server	10.6.3
microsoft	windows_7	all versions
microsoft	windows_vista	all versions
microsoft	windows_xp	all versions
microsoft	windows_xp	all versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2010-1759