Vulnerability in Apple Safari

CVE-2011-3443

Use-after-free vulnerability in WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and application crash) via vectors related to improper list management for Cascading Style Sheets (CSS) @font-face rules.

EPSS: 0.020 (78.7th percentile) — read the EPSS interpretation.

Affected products

  • Apple Safari — versions 1.0, 1.0.0, 1.0.0b1
  • N/a — versions n/a

Weakness classification (CWE)

References