CVE-2010-3116: Use After Free

Published Aug 24, 2010
·
Updated

Multiple use-after-free vulnerabilities in WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6, allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to improper handling of MIME types by plug-ins.

Affected Software

8 affected components
Google Chrome<5.0.375.127
Apple iPhone OS<4.2
Apple Safari<4.1.3
Apple Safari>=5.0<5.0.3
WebKitGTK WebKitGTK<1.2.6
Canonical Ubuntu Linux=10.10
Canonical Ubuntu Linux=9.10
Canonical Ubuntu Linux=10.04

Event History

Aug 24, 2010
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What types of systems are affected by CVE-2010-3116?

CVE-2010-3116 affects multiple versions of Google Chrome, Apple Safari, WebKitGTK+, and specific versions of Ubuntu Linux.

2

What is the risk associated with CVE-2010-3116?

CVE-2010-3116 poses a risk of arbitrary code execution and denial of service due to multiple use-after-free vulnerabilities.

3

How can CVE-2010-3116 be mitigated?

To mitigate CVE-2010-3116, users should update their browser or operating system to the latest available version that is not impacted.

4

What is the current status of security updates for CVE-2010-3116?

Security updates addressing CVE-2010-3116 have been released for affected software versions, including Google Chrome and Apple Safari.

5

Are there any known exploits for CVE-2010-3116?

At the time of disclosure, there were no publicly known exploits specifically targeting CVE-2010-3116.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203