WebKit in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2; Android before 2.2; and webkitgtk before 1.2.6; does not properly validate floating-point data, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted HTML document, related to non-standard NaN representation.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Itunes | — | Upgrade Apple iTunes to the latest version | Jan 3, 2012 | Sep 10, 2010 |
| Apple Safari | — | Upgrade to Apple Safari version 4.1.2Upgrade to Apple Safari version 5.0.2Uninstall Apple Safari on Windows | Jan 5, 2012 | Sep 10, 2010 |
| Freebsd | — | Upgrade webkit-gtk2 | Dec 10, 2025 | Oct 19, 2010 |
| Gentoo Linux | — | Upgrade app-admin/syslog-ng.Upgrade sys-apps/shadow.Upgrade dev-php/PEAR-Mail.Upgrade dev-vcs/gitolite.Upgrade net-libs/libsoup.Upgrade dev-db/unixODBC.Upgrade sys-cluster/resource-agents.Upgrade sys-fs/lvm2.Upgrade app-office/gnucash.Upgrade net-misc/rsync.Upgrade net-analyzer/sflowtool.Upgrade net-misc/vino.Upgrade media-sound/lastfmplayer.Upgrade gnome-base/gdm.Upgrade dev-util/qt-creator.Upgrade net-libs/webkit-gtk.Upgrade dev-libs/xmlsec.Upgrade dev-util/oprofile.Upgrade games-sports/racer-bin.Upgrade net-misc/mrouted.Upgrade app-misc/ca-certificates.Upgrade media-libs/fmod.Upgrade media-libs/xine-lib.Upgrade dev-php/PEAR-PEAR.Upgrade x11-apps/xrdb. | Oct 30, 2017 | Sep 10, 2010 |
| Google Android | — | Upgrade to the latest version of Google Android | Oct 8, 2014 | Sep 10, 2010 |
| Oracle_linux | — | Upgrade webkitgtk-docUpgrade webkitgtk-develUpgrade webkitgtk | Oct 16, 2024 | Sep 10, 2010 |
| Suse | — | Upgrade webkit-jscUpgrade libwebkit-1_0-2Upgrade libwebkit-1_0-2-32bitUpgrade libwebkit-langUpgrade libwebkit-devel | Feb 17, 2015 | Sep 10, 2010 |
| Ubuntu | — | Upgrade webkit | Nov 19, 2024 | Sep 10, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub