Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted XML document.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Safari | — | Upgrade to Apple Safari version 4.0.5Uninstall Apple Safari on Windows | Jan 5, 2012 | Mar 15, 2010 |
| Freebsd | — | Upgrade bugzilla | Dec 10, 2025 | Jan 25, 2011 |
| Suse | — | Upgrade libwebkit-develUpgrade libwebkit-langUpgrade libwebkit-1_0-2Upgrade libwebkit-1_0-2-32bitUpgrade webkit-jsc | Feb 17, 2015 | Mar 15, 2010 |
| Ubuntu | — | Upgrade webkit | Nov 19, 2024 | Mar 15, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub