← back
CVE-2010-1939

CVE-2010-1939

EPSS 14.7%
Use-after-free vulnerability in Apple Safari 4.0.5 on Windows allows remote attackers to execute arbitrary code by using window.open to create a popup window for a crafted HTML document, and then calling the parent window's close method, which triggers improper handling of a deleted window object.
Affected products
n/a · n/a
public PoCs found — 2
exploitdbwww.exploit-db.com/exploits/12614unverifiedexploitdbwww.exploit-db.com/exploits/12573unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://h07.w.interia.pl/Safari.rarhttp://reviews.cnet.com/8301-13727_7-20004709-263.htmlhttp://secunia.com/advisories/39670http://securitytracker.com/id?1023958https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6748http://www.kb.cert.org/vuls/id/943165http://www.osvdb.org/64482http://www.securityfocus.com/bid/39990http://www.vupen.com/english/advisories/2010/1097