CVE-2010-3809: Code Injection
WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly perform a cast of an unspecified variable during processing of inline styling, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted web site.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-3809?
The severity of CVE-2010-3809 is rated as high due to its ability to allow remote attackers to execute arbitrary code or cause a denial of service.
How do I fix CVE-2010-3809?
To fix CVE-2010-3809, update your Apple Safari browser to version 5.0.3 or later.
What versions of Safari are affected by CVE-2010-3809?
CVE-2010-3809 affects Apple Safari versions before 5.0.3 and WebKit versions before a certain patch.
Can CVE-2010-3809 be exploited remotely?
Yes, CVE-2010-3809 can be exploited remotely through specially crafted content served to users.
Is there a workaround for CVE-2010-3809?
There are no known workarounds for CVE-2010-3809; the best mitigation is to update to the latest version of Safari.