← back
CVE-2010-1807

CVE-2010-1807

EPSS 61.3%
WebKit in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2; Android before 2.2; and webkitgtk before 1.2.6; does not properly validate floating-point data, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted HTML document, related to non-standard NaN representation.
Affected products
n/a · n/a
public PoCs found — 2
exploitdbwww.exploit-db.com/exploits/15423unverifiedexploitdbwww.exploit-db.com/exploits/15548unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.htmlhttp://lists.apple.com/archives/security-announce/2010//Sep/msg00001.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=627703http://secunia.com/advisories/41856http://secunia.com/advisories/42314http://secunia.com/advisories/43068http://secunia.com/advisories/43086https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11964http://support.apple.com/kb/HT4333http://support.apple.com/kb/HT4456http://trac.webkit.org/changeset/64706