CVE Vulnerabilities

CVE-2010-1790

Published: Jul 30, 2010 | Modified: Apr 11, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
9.3 HIGH
AV:N/AC:M/Au:N/C:C/I:C/A:C
RedHat/V2
3.7 MODERATE
AV:L/AC:H/Au:N/C:P/I:P/A:P
RedHat/V3
Ubuntu
MEDIUM
root.io logo minimus.io logo echo.ai logo

WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; does not properly handle just-in-time (JIT) compiled JavaScript stubs, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted HTML document, related to a reentrancy issue.

Affected Software

NameVendorStart VersionEnd Version
SafariApple*5.0 (including)
SafariApple4.0 (including)4.0 (including)
SafariApple4.0.0b (including)4.0.0b (including)
SafariApple4.0.1 (including)4.0.1 (including)
SafariApple4.0.2 (including)4.0.2 (including)
SafariApple4.0.3 (including)4.0.3 (including)
SafariApple4.0.4 (including)4.0.4 (including)
SafariApple4.0.5 (including)4.0.5 (including)
WebkitApple**
Red Hat Enterprise Linux 6RedHatwebkitgtk-0:1.2.6-2.el6_0*
Chromium-browserUbuntudevel*
Chromium-browserUbuntulucid*
Chromium-browserUbuntumaverick*
Chromium-browserUbuntunatty*
Chromium-browserUbuntuoneiric*
Qt4-x11Ubuntujaunty*
Qt4-x11Ubuntukarmic*
Qt4-x11Ubuntulucid*
WebkitUbuntuhardy*
WebkitUbuntujaunty*
WebkitUbuntukarmic*
WebkitUbuntulucid*
WebkitUbuntuupstream*

References