CVE-2010-1119: Use After Free

Q: What is the severity of CVE-2010-1119?

CVE-2010-1119 is a high severity vulnerability that can allow remote attackers to execute arbitrary code or cause a denial of service.

Q: How do I fix CVE-2010-1119?

To fix CVE-2010-1119, update your Apple Safari and iPhone OS to the latest versions that include security patches.

Q: What software is affected by CVE-2010-1119?

CVE-2010-1119 affects specific versions of Apple Safari and Apple iPhone OS from versions 2.0 to 4.1.

Q: What can attackers exploit in CVE-2010-1119?

Attackers can exploit CVE-2010-1119 to execute arbitrary code or crash the application via a use-after-free condition in WebKit.

Q: Is there a workaround for CVE-2010-1119?

The best mitigation for CVE-2010-1119 is to ensure that vulnerable software is updated, as no specific workarounds are provided.

Published Mar 25, 2010

Updated

Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, Safari before 4.1 on Mac OS X 10.4, and Safari on Apple iPhone OS allows remote attackers to execute arbitrary code or cause a denial of service (application crash), or read the SMS database or other data, via vectors related to "attribute manipulation," as demonstrated by Vincenzo Iozzo and Ralf Philipp Weinmann during a Pwn2Own competition at CanSecWest 2010.

Affected Software

192 affected components

Apple iPhone OS=3.0

Apple iPhone OS=3.1.3

Apple iPhone OS=2.2

Apple iPhone OS=2.0.0

Apple iPhone OS=3.1.2

Apple iPhone OS=3.0.1

Apple iPhone OS=3.1

Apple iPhone OS=2.1

Apple iPhone OS=2.1.1

Apple iPhone OS=2.0.2

Apple iPhone OS=2.0

Apple iPhone OS=2.0.1

Apple iPhone OS=2.2.1

Apple Safari<=4.0.5

Apple Safari=1.0

Apple Safari=1.0-beta

Apple Safari=1.0-beta2

Apple Safari=1.0.0

Apple Safari=1.0.0b1

Apple Safari=1.0.0b2

Apple Safari=1.0.1

Apple Safari=1.0.2

Apple Safari=1.0.3

Apple Safari=1.0.3-85.8

Apple Safari=1.0.3-85.8.1

Apple Safari=1.1

Apple Safari=1.1.0

Apple Safari=1.1.1

Apple Safari=1.2

Apple Safari=1.2.0

Apple Safari=1.2.1

Apple Safari=1.2.2

Apple Safari=1.2.3

Apple Safari=1.2.4

Apple Safari=1.2.5

Apple Safari=1.3

Apple Safari=1.3.0

Apple Safari=1.3.1

Apple Safari=1.3.2

Apple Safari=1.3.2-312.5

Apple Safari=1.3.2-312.6

Apple Safari=2

Apple Safari=2.0

Apple Safari=2.0.0

Apple Safari=2.0.1

Apple Safari=2.0.2

Apple Safari=2.0.3

Apple Safari=2.0.3-417.8

Apple Safari=2.0.3-417.9

Apple Safari=2.0.3-417.9.2

Apple Safari=2.0.3-417.9.3

Apple Safari=2.0.4

Apple Safari=3

Apple Safari=3.0

Apple Safari=3.0.0

Apple Safari=3.0.0b

Apple Safari=3.0.1

Apple Safari=3.0.1-beta

Apple Safari=3.0.1b

Apple Safari=3.0.2

Apple Safari=3.0.2b

Apple Safari=3.0.3

Apple Safari=3.0.3b

Apple Safari=3.0.4

Apple Safari=3.0.4b

Apple Safari=3.1

Apple Safari=3.1.0

Apple Safari=3.1.0b

Apple Safari=3.1.1

Apple Safari=3.1.2

Apple Safari=3.2.0

Apple Safari=3.2.1

Apple Safari=3.2.2

Apple Safari=3.2.3

Apple Safari=4.0

Apple Safari=4.0-beta

Apple Safari=4.0.0b

Apple Safari=4.0.1

Apple Safari=4.0.2

Apple Safari=4.0.3

Apple Safari=4.0.4

Apple Safari=4.1

Apple iOS and macOS=10.5

Apple iOS and macOS=10.5.0

Apple iOS and macOS=10.5.1

Apple iOS and macOS=10.5.2

Apple iOS and macOS=10.5.3

Apple iOS and macOS=10.5.4

Apple iOS and macOS=10.5.5

Apple iOS and macOS=10.5.6

Apple iOS and macOS=10.5.7

Apple iOS and macOS=10.5.8

Apple iOS and macOS=10.6.0

Apple Mac OS X Server=10.5.0

Apple Mac OS X Server=10.5.1

Apple Mac OS X Server=10.5.2

Apple Mac OS X Server=10.5.3

Apple Mac OS X Server=10.5.4

Apple Mac OS X Server=10.5.5

Apple Mac OS X Server=10.5.6

Apple Mac OS X Server=10.5.7

Apple Mac OS X Server=10.5.8

Apple Mac OS X Server=10.6.0

Apple Mac OS X Server=10.6.1

Apple Mac OS X Server=10.6.2

Apple Mac OS X Server=10.6.3

Apple Mac OS X Server=10.6.4

Microsoft Windows

All of the following

Any of the following