CVE-2010-3805: Critical severity safari vulnerability
Integer underflow in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving WebSockets. NOTE: this may overlap CVE-2010-3254.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-3805?
CVE-2010-3805 is classified as a critical vulnerability due to its potential to allow remote code execution or denial of service.
How do I fix CVE-2010-3805?
To remediate CVE-2010-3805, users should update their Apple Safari browser to version 5.0.3 or later on affected platforms.
Which versions of Safari are affected by CVE-2010-3805?
CVE-2010-3805 affects Apple Safari versions prior to 5.0.3 on Mac OS X and prior to 4.1.3 on earlier Mac OS X versions.
What impact does CVE-2010-3805 have on users?
If exploited, CVE-2010-3805 can lead to arbitrary code execution, compromising user systems and potentially leading to data loss.
Is there a workaround for CVE-2010-3805?
Currently, the most effective workaround for CVE-2010-3805 is to discontinue using affected versions of Safari until they are updated.