CVE-2010-1786: Use After Free
Use-after-free vulnerability in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a foreignObject element in an SVG document.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-1786?
CVE-2010-1786 has a medium severity rating, allowing for remote code execution or application crashes.
How do I fix CVE-2010-1786?
To resolve CVE-2010-1786, update Apple Safari to version 5.0.1 or later, or apply the relevant patches provided by Apple.
Which versions of Safari are affected by CVE-2010-1786?
CVE-2010-1786 affects Apple Safari versions prior to 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and versions prior to 4.1.1 on Mac OS X 10.4.
Can CVE-2010-1786 lead to denial of service?
Yes, CVE-2010-1786 can cause a denial of service due to an application crash triggered by the vulnerability.
Is CVE-2010-1786 limited to specific operating systems?
CVE-2010-1786 affects Safari on multiple operating systems, including older versions of Mac OS X and Windows.