CVE-2010-1410

WebKit: memory corruption vulnerability in handling of nested 'use' elements in SVG documents

Published Jun 11, 2010 CVSS 2.0 · 9.3 Critical EPSS 6.9% KEV · Not listed
Description
WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via an SVG document with nested use elements.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Metrics epss

{'score': 0.1969}

epss

{'score': 0.16558}

Weaknesses

Sources

Status
PUBLISHED
Assigner
apple
Published
Updated
Aug 7, 2024, 1:21 AM
Reserved
Apr 15, 2010, 12:00 AM
Status
Modified
Published
Jun 11, 2010, 6:00 PM
Modified
Jun 16, 2026, 11:18 PM
Severity
Critical
Public date
Jun 7, 2010, 12:00 AM