CVE-2010-3812

webkit: Integer overflow in WebKit's handling of Text objects

Published Nov 20, 2010 CVSS 2.0 · 9.3 Critical EPSS 6.9% KEV · Not listed
Description
Integer overflow in the Text::wholeText method in dom/Text.cpp in WebKit, as used in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4; webkitgtk before 1.2.6; and possibly other products allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving Text objects.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2010-3791 Integer overflow in the Text::wholeText method in dom/Text.cpp in WebKit, as used in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4; webkitgtk before 1.2.6; and possibly other products allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving Text objects.
Ubuntu USN Ubuntu USN USN-1195-1 WebKit vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
apple
Published
Updated
Aug 7, 2024, 3:26 AM
Reserved
Oct 7, 2010, 12:00 AM
Status
Modified
Published
Nov 22, 2010, 1:00 PM
Modified
Jun 16, 2026, 11:23 PM
Severity
Moderate
Public date
Jan 1, 2010, 12:00 AM