CVE-2010-1749: Use After Free
Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to the Cascading Style Sheets (CSS) run-in property and multiple invocations of a destructor for a child element that has been referenced multiple times.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-1749?
CVE-2010-1749 is considered to have a critical severity level due to its potential to allow remote code execution.
How do I fix CVE-2010-1749?
To fix CVE-2010-1749, users should update to the latest version of Apple Safari, specifically Safari 5.0 or later.
What systems are affected by CVE-2010-1749?
CVE-2010-1749 affects Apple Safari versions prior to 5.0 on Mac OS X 10.5 through 10.6 and Windows, as well as Mac OS X 10.4 with Safari prior to 4.1.
What can attackers do with CVE-2010-1749?
Attackers can exploit CVE-2010-1749 to execute arbitrary code or cause crashes in Safari, leading to a denial of service.
When was CVE-2010-1749 reported?
CVE-2010-1749 was reported in May 2010, highlighting a significant vulnerability in Safari's WebKit.