CVE-2010-1790

WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; does not properly…

published July 30, 2010

CVSS
—
EPSS
6%
Percentile
93.4
In the wild
Unconfirmed
What it is

⚠️ A crafty crafted HTML document is all it takes to exploit this vulnerability! WebKit in Safari prior to version 5.0.1 is vulnerable to a sneaky reentrancy issue, allowing attackers to execute arbitrary code or crash applications. 🔥 Think of it like a restaurant that can't handle a customer trying to reorder a meal while the chef is still cooking — it gets all mixed up, and chaos ensues! This JIT compilation issue means the browser can get overwhelmed and serve up dangerous results instead of safe content. If exploited, an attacker could execute arbitrary code on your system or crash the application entirely, leading to potential data loss or an unsatisfactory user experience. This could be especially alarming if you're working on something sensitive or urgent.

Put simply

Think of it like a restaurant that can't handle a customer trying to reorder a meal while the chef is still cooking — it gets all mixed up, and chaos ensues! This JIT compilation issue means the browser can get overwhelmed and serve up dangerous results instead of safe content. The vulnerability arises from improper handling of JIT-compiled JavaScript stubs in WebKit. As a result, a specially crafted HTML document can trigger unpredictable behavior, leading to arbitrary code execution or denial of service.

What to do

If exploited, an attacker could execute arbitrary code on your system or crash the application entirely, leading to potential data loss or an unsatisfactory user experience. This could be especially alarming if you're working on something sensitive or urgent. To remediate this issue, update Safari to version 5.0.1 or later on affected Mac OS X versions and ensure WebKitGTK is updated to at least version 1.2.6. Regularly check for updates to your software and implement routine security audits to catch such vulnerabilities. You've got this! Stay vigilant and keep your systems updated — together, we'll secure the web! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06084 · 93.4th percentile
Published
2010-07-30T20:00Z
EPSS history
Timeline
  • 30 JUL 20:00Z
    WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; does not properly…
    cvelistv5