WebKit in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2; Android before 2.2; and webkitgtk before 1.2.6; does not properly validate floating-point data, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted HTML document, related to non-standard NaN representation.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Itunes | — | Upgrade Apple iTunes to the latest version | Jan 3, 2012 | Sep 10, 2010 |
| Apple Safari | — | Upgrade to Apple Safari version 5.0.2Upgrade to Apple Safari version 4.1.2Uninstall Apple Safari on Windows | Jan 5, 2012 | Sep 10, 2010 |
| Freebsd | — | Upgrade webkit-gtk2 | Dec 10, 2025 | Oct 19, 2010 |
| Gentoo Linux | — | Upgrade app-office/gnucash.Upgrade gnome-base/gdm.Upgrade media-sound/lastfmplayer.Upgrade dev-db/unixODBC.Upgrade net-analyzer/sflowtool.Upgrade net-libs/libsoup.Upgrade dev-util/qt-creator.Upgrade net-misc/rsync.Upgrade dev-php/PEAR-Mail.Upgrade net-misc/vino.Upgrade sys-apps/shadow.Upgrade app-admin/syslog-ng.Upgrade sys-fs/lvm2.Upgrade dev-vcs/gitolite.Upgrade sys-cluster/resource-agents.Upgrade app-misc/ca-certificates.Upgrade dev-util/oprofile.Upgrade net-libs/webkit-gtk.Upgrade media-libs/xine-lib.Upgrade media-libs/fmod.Upgrade dev-libs/xmlsec.Upgrade games-sports/racer-bin.Upgrade net-misc/mrouted.Upgrade x11-apps/xrdb.Upgrade dev-php/PEAR-PEAR. | Oct 30, 2017 | Sep 10, 2010 |
| Google Android | — | Upgrade to the latest version of Google Android | Oct 8, 2014 | Sep 10, 2010 |
| Oracle_linux | — | Upgrade webkitgtkUpgrade webkitgtk-docUpgrade webkitgtk-devel | Oct 16, 2024 | Sep 10, 2010 |
| Suse | — | Upgrade libwebkit-develUpgrade libwebkit-1_0-2-32bitUpgrade libwebkit-langUpgrade libwebkit-1_0-2Upgrade webkit-jsc | Feb 17, 2015 | Sep 10, 2010 |
| Ubuntu | — | Upgrade webkit | Nov 19, 2024 | Sep 10, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub