CVE-2011-1453

Related Files

Zero Day Initiative Advisory 11-240

Posted Jul 27, 2011

Authored by Tipping Point | Site zerodayinitiative.com

Zero Day Initiative Advisory 11-240 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari's Webkit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the library's support of SVG markers. When updating a marker, the application will duplicate the reference of an object without updating its reference count. When freeing this object, a use-after-free vulnerability can be made to occur. This can be leveraged by a remote attacker to execute code under the context of the user running the application.

tags | advisory, remote, arbitrary

systems | apple

advisories | CVE-2011-1453

SHA-256 | 9955e1a0118de7587b35cc2341eb06299e4d3ea9f28954c95c79d4b5a540588d

Download | Favorite | View