CVE-2010-3826: Critical severity safari vulnerability
WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly perform a cast of an unspecified variable during processing of colors in an SVG document, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted web site.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-3826?
CVE-2010-3826 is categorized as a critical vulnerability that may lead to arbitrary code execution.
How do I fix CVE-2010-3826?
To fix CVE-2010-3826, users should update their Apple Safari to version 5.0.3 or later.
Which versions of Safari are affected by CVE-2010-3826?
CVE-2010-3826 affects Apple Safari versions prior to 5.0.3 on Mac OS X 10.5 through 10.6 and on Windows.
Can CVE-2010-3826 lead to denial of service?
Yes, CVE-2010-3826 can also cause denial of service conditions due to improper handling of colors in SVG documents.
Do all operating systems running affected Safari versions have the CVE-2010-3826 vulnerability?
CVE-2010-3826 specifically impacts Safari on Mac OS X versions prior to 5.0.3 and certain Windows versions.