CVE-2010-1403

Related Files

Zero Day Initiative Advisory 10-099

Posted Jun 9, 2010

Authored by Tipping Point | Site zerodayinitiative.com

Zero Day Initiative Advisory 10-099 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple's Webkit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with how WebKit inserts error messages into documents utilizing the SVG namespace. Upon a parsing error the library will attempt to access an element before repairing the XML. This will cause the library to access uninitialized memory which can lead to code execution under the context of the application.

tags | advisory, remote, arbitrary, code execution

systems | apple

advisories | CVE-2010-1403

SHA-256 | c20cb2abc01288159002fd8573e829bcf9ef476e30bf40c52bfb1c94e6ff04e6

Download | Favorite | View