Use-after-free vulnerability in the garbage-collection implementation in WebCore in WebKit in Apple Safari before 4.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap corruption and application crash) via an SVG animation element, related to SVG set objects, SVG marker elements, the targetElement attribute, and unspecified "caches."
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Safari | — | Upgrade to Apple Safari version 4.0Uninstall Apple Safari on Windows | Jan 5, 2012 | Jun 10, 2009 |
| Centos_linux | — | Upgrade kdegraphicsUpgrade kdegraphics-devel | Dec 1, 2016 | Jun 10, 2009 |
| Suse | — | Upgrade libwebkit-develUpgrade kdegraphics3-scanUpgrade kdegraphics3-postscriptUpgrade kdegraphics3-develUpgrade kdegraphics3-texUpgrade kdegraphics3-faxUpgrade kdegraphics3Upgrade webkit-jscUpgrade kdegraphics3-extraUpgrade libwebkit-1_0-2Upgrade kdegraphics3-pdfUpgrade kdegraphics3-imagingUpgrade kdegraphics3-3DUpgrade libwebkit-1_0-2-32bitUpgrade kdegraphics3-kameraUpgrade libwebkit-lang | Feb 17, 2015 | Jun 10, 2009 |
| Ubuntu | — | Upgrade ksvg | Nov 8, 2024 | Jun 10, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub