Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via HTML elements with right-to-left (RTL) text directionality.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Safari | — | Upgrade to Apple Safari version 4.0.5Uninstall Apple Safari on Windows | Jan 5, 2012 | Mar 15, 2010 |
| Suse | — | Upgrade libwebkit-langUpgrade libwebkit-develUpgrade libwebkit-1_0-2-32bitUpgrade webkit-jscUpgrade libwebkit-1_0-2 | Feb 17, 2015 | Mar 15, 2010 |
| Ubuntu | — | Upgrade webkit | Nov 19, 2024 | Mar 15, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub