CVE-2010-1385

Use-after-free vulnerability in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to…

published June 11, 2010

CVSS
—
EPSS
5%
Percentile
92.7
In the wild
Unconfirmed
What it is

⚠️ A crafted PDF document could lead to a wild ride for users of vulnerable Safari versions — think of it like opening a birthday present that explodes confetti everywhere! 🎉 This use-after-free vulnerability is akin to a hotel guest who checks out, but the front desk keeps the room key active — allowing someone to waltz in and have a party without anyone noticing. 🏨 An attacker could exploit this vulnerability to execute arbitrary code or crash the application entirely, turning your browsing experience into a surprise showstopper! Users on affected versions of Safari might find their systems compromised or simply sent crashing down.

Put simply

This use-after-free vulnerability is akin to a hotel guest who checks out, but the front desk keeps the room key active — allowing someone to waltz in and have a party without anyone noticing. 🏨 The vulnerability arises when Safari fails to properly manage memory after a resource is freed, allowing misuse of that memory space. This could let attackers run their code or disrupt the application with a specially crafted PDF document.

What to do

An attacker could exploit this vulnerability to execute arbitrary code or crash the application entirely, turning your browsing experience into a surprise showstopper! Users on affected versions of Safari might find their systems compromised or simply sent crashing down. Update Safari to version 5.0 or later on Mac OS X 10.5 through 10.6 and version 4.1 or later on Mac OS X 10.4. Regularly check for updates to stay ahead of vulnerabilities like this one! 🔄 You've got this! Stay vigilant, keep your software updated, and you'll be a browsing superhero in no time! 🦸‍♂️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05476 · 92.7th percentile
Published
2010-06-11T17:28Z
EPSS history
Timeline
  • 11 JUN 17:28Z
    Use-after-free vulnerability in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to…
    cvelistv5