Vulnerabilities > CVE-2010-1750 - Resource Management Errors vulnerability in Apple Safari

CVSS 9.3 - CRITICAL

Attack vector

NETWORK

Attack complexity

MEDIUM

Privileges required

NONE

Confidentiality impact

COMPLETE

Integrity impact

COMPLETE

Availability impact

COMPLETE

network

apple

microsoft

CWE-399

critical

nessus

NVD

Published: 2010-06-11

Updated: 2017-09-19

Summary

Use-after-free vulnerability in Apple Safari before 5.0 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to improper window management.

Vulnerable Configurations

Part	Description	Count
Application	Apple Apple Safari 4.0 Apple Safari 4.0.0B Apple Safari 4.0.1 Apple Safari 4.0.2 Apple Safari 4.0.3 Apple Safari 4.0.4 Apple Safari - Apple Safari 1.0 Apple Safari 1.0.0 Apple Safari 1.0.0B1 Apple Safari 1.0.0B2 Apple Safari 1.0.1 Apple Safari 1.0.2 Apple Safari 1.0.3 Apple Safari 1.0B1 Apple Safari 1.1 Apple Safari 1.1.0 Apple Safari 1.1.1 Apple Safari 1.2 Apple Safari 1.2.0 Apple Safari 1.2.1 Apple Safari 1.2.2 Apple Safari 1.2.3 Apple Safari 1.2.4 Apple Safari 1.2.5 Apple Safari 1.3 Apple Safari 1.3.0 Apple Safari 1.3.1 Apple Safari 1.3.2 Apple Safari 2 Apple Safari 2.0 Apple Safari 2.0.0 Apple Safari 2.0.1 Apple Safari 2.0.2 Apple Safari 2.0.3 Apple Safari 2.0.4 Apple Safari 3 Apple Safari 3.0 Apple Safari 3.0.0 Apple Safari 3.0.0B Apple Safari 3.0.1 Apple Safari 3.0.1B Apple Safari 3.0.2 Apple Safari 3.0.2B Apple Safari 3.0.3 Apple Safari 3.0.3B Apple Safari 3.0.4 Apple Safari 3.0.4B Apple Safari 3.0.5 Apple Safari 3.1.0 Apple Safari 3.1.0B Apple Safari 3.1.1 Apple Safari 3.1.1B Apple Safari 3.1.2 Apple Safari 3.1.2B Apple Safari 3.2.0 Apple Safari 3.2.0B Apple Safari 3.2.1 Apple Safari 3.2.1B Apple Safari 3.2.2 Apple Safari 3.2.2B Apple Safari 4.0.5	87
OS	Microsoft Microsoft Windows 7 * Microsoft Windows Vista * Microsoft Windows XP *	4

Common Weakness Enumeration (CWE)

CWE-399 - Resource Management Errors

Nessus

NASL family	Windows
NASL id	SAFARI_5_0.NASL
description	The version of Safari installed on the remote Windows host is earlier than 5.0. As such, it is potentially affected by numerous issues in the following components : - ColorSync - Safari - WebKit
last seen	2020-06-01
modified	2020-06-02
plugin id	46838
published	2010-06-08
reporter	This script is Copyright (C) 2010-2018 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/46838
title	Safari < 5.0 Multiple Vulnerabilities

Oval

accepted

2013-12-30T04:01:04.276-05:00

class

vulnerability

contributors

name J. Daniel Brown
organization DTCC
name Preeti Subramanian
organization SecPod Technologies
name Shane Shaffer
organization G2, Inc.
name Maria Kedovskaya
organization ALTX-SOFT
name Maria Kedovskaya
organization ALTX-SOFT

definition_extensions

comment	Apple Safari is installed
oval	oval:org.mitre.oval:def:6325

description

family

windows

oval:org.mitre.oval:def:7143

status

accepted

submitted

2010-06-08T17:30:00.000-05:00

title

Apple Safari Window Management Vulnerability

version

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

Nessus

Oval

References