WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, accesses uninitialized memory during the handling of a use element in an SVG document, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted document containing XML that triggers a parsing error, related to ProcessInstruction.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: apple
Published: 2010-06-11T17:28:00
Updated: 2018-10-10T18:57:01
Reserved: 2010-04-15T00:00:00
Link: CVE-2010-1403
JSON object: View
NVD Information
Status : Modified
Published: 2010-06-11T18:00:32.677
Modified: 2018-10-10T19:57:04.587
Link: CVE-2010-1403
JSON object: View
Redhat Information
No data.
CWE