CVE-2010-1770

WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, Apple Safari before 4.1 on Mac OS X 10.4, and Google Chrome before 5.0.375.70 does…

published June 11, 2010

CVSS
—
EPSS
5%
Percentile
91.9
In the wild
Unconfirmed
What it is

⚠️ A sneaky type-checking issue in WebKit can turn your browser into a playground for remote attackers! 🕵️‍♂️ Think of it like a waiter who misreads your order—a wrong label on a dish can lead to unexpected results. In this case, a crafted HTML document can cause havoc, like serving up a surprise dish that makes your appetite for browsing suddenly vanish! An attacker could exploit this vulnerability to execute arbitrary code or even cause a crash, leading to a denial of service. This means your browser could freeze or crash unexpectedly while you’re just trying to surf the web—definitely not the kind of surprise anyone wants!

Put simply

Think of it like a waiter who misreads your order—a wrong label on a dish can lead to unexpected results. In this case, a crafted HTML document can cause havoc, like serving up a surprise dish that makes your appetite for browsing suddenly vanish! This vulnerability arises from improper handling of a transformation of a text node using the IBM1147 character set in WebKit. When a crafted HTML document containing a BR element is processed, it leads to memory corruption and potential application crashes.

What to do

An attacker could exploit this vulnerability to execute arbitrary code or even cause a crash, leading to a denial of service. This means your browser could freeze or crash unexpectedly while you’re just trying to surf the web—definitely not the kind of surprise anyone wants! To protect yourself, update Apple Safari to version 5.0 or later on Mac OS X and Windows, and ensure Google Chrome is at least version 5.0.375.70. Don’t forget to keep your browser regularly updated to fend off future vulnerabilities! You've got this! Staying updated is the key to being a security hero! 🦸‍♀️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04756 · 91.9th percentile
Published
2010-06-11T19:00Z
EPSS history
Timeline
  • 11 JUN 19:00Z
    WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, Apple Safari before 4.1 on Mac OS X 10.4, and Google Chrome before 5.0.375.70 does…
    cvelistv5