CVE-2010-3812: Integer Overflow
Common Vulnerabilities and Exposures assigned an identifier CVE-2010-3812 to the following vulnerability:
Name: CVE-2010-3812 Status: Candidate URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3812 Assigned: 20101007 Reference: CONFIRM:http://support.apple.com/kb/HT4455 Reference: CONFIRM:http://support.apple.com/kb/HT4456
Upstream: Chrome Bug: http://code.google.com/p/chromium/issues/detail?id=57347 Bugzilla: https://bugs.webkit.org/showbug.cgi?id=46848 Trac: http://trac.webkit.org/changeset/68705
This is fixed in webkitgtk 1.2.6
Other sources
Integer overflow in the Text::wholeText method in dom/Text.cpp in WebKit, as used in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4; webkitgtk before 1.2.6; and possibly other products allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving Text objects.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the impact of CVE-2010-3812?
CVE-2010-3812 can lead to arbitrary code execution due to improper validation of web content in Apple Safari.
Which versions of Safari are affected by CVE-2010-3812?
CVE-2010-3812 affects Apple Safari versions up to and including 5.0.2 and 5.0.
What platforms are impacted by CVE-2010-3812?
CVE-2010-3812 primarily affects Apple Safari on macOS, specifically versions prior to 5.1.
How can I mitigate the effects of CVE-2010-3812?
To mitigate CVE-2010-3812, users should update Apple Safari to the latest version available.
Is there a patch available for CVE-2010-3812?
Yes, Apple has released updates that address the vulnerabilities identified in CVE-2010-3812.