CVEvulnerability

CVE-2010-3257

9.3 HIGH Published 2010-09-07 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2010-09-07
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-416

Description

Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 6.0.472.53, and webkitgtk before 1.2.6, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving element focus.

Affected configurations

• google chrome (< 6.0.472.53) • webkitgtk webkitgtk (< 1.2.6) • apple safari (< 4.1.3) • apple safari (>= 5.0 < 5.0.3) • apple iphone os (< 4.2) • canonical ubuntu linux 9.10 • canonical ubuntu linux 10.04 • canonical ubuntu linux 10.10

Related

Weakness · CWE (1)

Referenced by CWE · observed example (1)

  • CWE-825 Expired Pointer Dereference weakness

References