Use-after-free vulnerability in the garbage-collection implementation in WebCore in WebKit in Apple Safari before 4.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap corruption and application crash) via an SVG animation element, related to SVG set objects, SVG marker elements, the targetElement attribute, and unspecified "caches."
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Safari | — | Upgrade to Apple Safari version 4.0Uninstall Apple Safari on Windows | Jan 5, 2012 | Jun 10, 2009 |
| Centos_linux | — | Upgrade kdegraphicsUpgrade kdegraphics-devel | Dec 1, 2016 | Jun 10, 2009 |
| Suse | — | Upgrade libwebkit-1_0-2Upgrade kdegraphics3-extraUpgrade libwebkit-langUpgrade libwebkit-1_0-2-32bitUpgrade kdegraphics3-imagingUpgrade kdegraphics3-kameraUpgrade kdegraphics3-pdfUpgrade kdegraphics3-3DUpgrade kdegraphics3-texUpgrade kdegraphics3-faxUpgrade kdegraphics3Upgrade libwebkit-develUpgrade kdegraphics3-scanUpgrade kdegraphics3-develUpgrade webkit-jscUpgrade kdegraphics3-postscript | Feb 17, 2015 | Jun 10, 2009 |
| Ubuntu | — | Upgrade ksvg | Nov 8, 2024 | Jun 10, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub