CVE-2010-1398: Buffer Overflow
WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, does not properly perform ordered list insertions, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document, related to the insertion of an unspecified element into an editable container and the access of an uninitialized element.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-1398?
CVE-2010-1398 has a critical severity level due to the potential for remote code execution or denial of service.
How do I fix CVE-2010-1398?
To fix CVE-2010-1398, update your Apple Safari browser to version 5.0 or later.
Which versions of Safari are affected by CVE-2010-1398?
CVE-2010-1398 affects Safari versions prior to 5.0 on Mac OS X 10.5 through 10.6 and Windows, as well as versions before 4.1 on Mac OS X 10.4.
Can CVE-2010-1398 affect Mac OS X users?
Yes, CVE-2010-1398 specifically affects Mac OS X users with vulnerable versions of Safari installed.
What impact could CVE-2010-1398 have on my system?
CVE-2010-1398 could allow attackers to execute arbitrary code on your system or cause applications to crash.