CVE-2010-3823: Use After Free
Use-after-free vulnerability in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving Geolocation objects. NOTE: this might overlap CVE-2010-3415.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-3823?
CVE-2010-3823 is classified as a critical vulnerability as it allows remote attackers to execute arbitrary code or cause a denial of service.
How do I fix CVE-2010-3823?
To fix CVE-2010-3823, update your Apple Safari browser to version 5.0.3 or later.
What versions of Safari are affected by CVE-2010-3823?
CVE-2010-3823 affects Apple Safari versions prior to 5.0.3 on Mac OS X 10.5 through 10.6 and prior to 4.1.3 on Mac OS X 10.4.
What is a use-after-free vulnerability like CVE-2010-3823?
A use-after-free vulnerability occurs when a program continues to use a memory reference after it has been freed, potentially leading to arbitrary code execution.
Is CVE-2010-3823 specific to any operating system?
CVE-2010-3823 is present in Apple Safari on both Mac OS X and Windows operating systems.