CVE-2010-3821: Buffer Overflow
WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly handle the :first-letter pseudo-element in a Cascading Style Sheets (CSS) token sequence, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-3821?
The severity of CVE-2010-3821 is categorized as high due to the potential for remote code execution.
How do I fix CVE-2010-3821?
To fix CVE-2010-3821, update your Apple Safari browser to version 5.0.3 or later.
Which versions of Safari are affected by CVE-2010-3821?
CVE-2010-3821 affects Safari versions prior to 5.0.3 on Mac OS X 10.5 through 10.6 and 4.1.3 on Mac OS X 10.4.
Can CVE-2010-3821 affect Windows users?
Yes, CVE-2010-3821 can affect Windows users using any affected version of Safari prior to the fix.
What exploitation methods are associated with CVE-2010-3821?
CVE-2010-3821 can be exploited through improper handling of the :first-letter pseudo-element in CSS, allowing for remote code execution.