CVE-2010-1761

Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote…

published June 11, 2010

CVSS
—
EPSS
7%
Percentile
93.9
In the wild
Unconfirmed
What it is

⚠️ A crafty use-after-free vulnerability in WebKit could let attackers remotely execute code on your system! This sneaky flaw affects Apple Safari before version 5.0 and also hits Windows. 🔥 Think of it like a restaurant serving dishes that have been taken off the menu but still keep making appearances — an empty plate that somehow gets filled again, leading to unexpected surprises for diners! If exploited, an attacker could make your Safari application crash or even run arbitrary code, potentially allowing them to take control of your machine. That's like letting an unexpected guest into your party, who then crashes the whole event!

Put simply

Think of it like a restaurant serving dishes that have been taken off the menu but still keep making appearances — an empty plate that somehow gets filled again, leading to unexpected surprises for diners! This vulnerability arises from improper handling of HTML document subtrees in WebKit, resulting in the potential for executing code after the memory has been freed. It’s a classic use-after-free scenario that's surprisingly tricky.

What to do

If exploited, an attacker could make your Safari application crash or even run arbitrary code, potentially allowing them to take control of your machine. That's like letting an unexpected guest into your party, who then crashes the whole event! To stay safe, upgrade your Safari browser to version 5.0 or later on macOS and 4.1 or later on OS X 10.4. Regularly check for updates to keep your system secure! You've got this! Following these steps will help you close the door on this vulnerability. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06698 · 93.9th percentile
Published
2010-06-11T19:00Z
EPSS history
Timeline
  • 11 JUN 19:00Z
    Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote…
    cvelistv5