CVE-2010-3822: Buffer Overflow
WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, accesses an uninitialized pointer during processing of Cascading Style Sheets (CSS) counter styles, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted web site.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-3822?
CVE-2010-3822 has been classified as a critical vulnerability due to its potential to allow arbitrary code execution or cause a denial of service.
How do I fix CVE-2010-3822?
To mitigate CVE-2010-3822, update Apple Safari to version 5.0.3 or later, or Apple WebKit to the latest version.
What versions of Safari are affected by CVE-2010-3822?
CVE-2010-3822 affects Apple Safari versions prior to 5.0.3 on Mac OS X and versions before 4.1.3 on Mac OS X 10.4.
Can CVE-2010-3822 impact Windows users?
Yes, CVE-2010-3822 affects Safari users on Windows systems that are running vulnerable versions of the browser.
Is there any workaround for CVE-2010-3822?
The best workaround for CVE-2010-3822 is to avoid using the affected versions of Safari and upgrade to the latest version immediately.