CVE-2010-3819: Code Injection
WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly perform a cast of an unspecified variable during processing of Cascading Style Sheets (CSS) boxes, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted web site.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-3819?
CVE-2010-3819 is rated as a high severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2010-3819?
To fix CVE-2010-3819, upgrade to Apple Safari version 5.0.3 or later.
What versions of Safari are affected by CVE-2010-3819?
CVE-2010-3819 affects Safari versions prior to 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4.
Can CVE-2010-3819 cause data loss?
Yes, CVE-2010-3819 can allow attackers to execute arbitrary code, potentially leading to data loss or system compromise.
Is there a workaround for CVE-2010-3819 before applying the fix?
Currently, there are no known workarounds for CVE-2010-3819, so upgrading Safari is the preferred action.