RCE in Apple Mac OS X
CVE-2010-1770
WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, Apple Safari before 4.1 on Mac OS X 10.4, and Google Chrome before 5.0.375.70 does not properly handle a transformation of a text node that has the IBM1147 character set, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document containing a BR element, related to a "type checking issue."
Vulnerability class: RCE (Remote Code Execution)
EPSS: 0.048 (91.0th percentile) — read the EPSS interpretation.
Affected products
- Apple Mac_os_x — versions 10.4.11, 10.4.7, 10.6.3
- Apple Mac_os_x_server — versions 10.4.11, 10.4.7, 10.6.3
- Apple Safari
- Apple Webkit
- Google Chrome
- Microsoft Windows_7
- Microsoft Windows_vista
- Microsoft Windows_xp
- Canonical Ubuntu_linux — versions 10.04, 10.04.4, 9.10
- Opensuse — versions 11.3, 11.2
Weakness classification (CWE)
References
- product-security@apple.com (vendor-advisory, Third Party Advisory, x_refsource_MANDRIVA)
- product-security@apple.com (x_refsource_CONFIRM, Vendor Advisory)
- product-security@apple.com (Permissions Required, Third Party Advisory, vdb-entry, x_refsource_VUPEN)
- product-security@apple.com (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
- product-security@apple.com (vendor-advisory, x_refsource_APPLE, Mailing List, Vendor Advisory)
- product-security@apple.com (x_refsource_MISC, Third Party Advisory, VDB Entry)
- product-security@apple.com (x_refsource_CONFIRM, Vendor Advisory)
- product-security@apple.com (x_refsource_UBUNTU, vendor-advisory, Third Party Advisory)
- product-security@apple.com (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
- product-security@apple.com (Permissions Required, Third Party Advisory, vdb-entry, x_refsource_VUPEN)