Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-3802 State: PUBLISHED Published: 2010-12-09T19:00:00 Last Updated: 2024-08-07T03:26:11.101Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted panorama atom in a QuickTime Virtual Reality (QTVR) movie file. Additional Analyst Notes: - CVE Program Container: References: - http://zerodayinitiative.com/advisories/ZDI-10-260/ - http://osvdb.org/69756 - http://lists.apple.com/archives/security-announce/2010//Dec/msg00000.html - http://lists.apple.com/archives/security-announce/2011/M
.apple.com/archives/security-announce/2010//Dec/msg00000.html - http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16105 - http://support.apple.com/kb/HT4447 - http://www.securitytracker.com/id?1024830 - http://support.apple.com/kb/HT4581
CVE ID: CVE-2010-3803 State: PUBLISHED Published: 2010-11-20T21:00:00 Last Updated: 2024-08-07T03:26:11.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted string. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43068 - http://support.apple.com/kb/HT4455 - http://www.vupen.com/english/advisories/2011/0212 - http://www.vupen.com/english/advisories/2010/3046 - https://exchange.xforce.ibmcloud.
com/english/advisories/2011/0212 - http://www.vupen.com/english/advisories/2010/3046 - https://exchange.xforce.ibmcloud.com/vulnerabilities/63346 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://lists.apple.com/archives/security-announce/2010//Nov/msg00002.html - http://secunia.com/advisories/42314 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12130 - http://support.apple.com/kb/HT4456 - http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html
CVE ID: CVE-2010-3804 State: PUBLISHED Published: 2010-11-20T21:00:00 Last Updated: 2024-08-07T03:26:11.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JavaScript implementation in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, uses a weak algorithm for generating values of random numbers, which makes it easier for remote attackers to track a user by predicting a value, a related issue to CVE-2008-5913 and CVE-2010-3171. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43068 - http://support.apple.com/kb/HT4455 - http://www.vupen.com/english/advisories/2011/021
p://secunia.com/advisories/43068 - http://support.apple.com/kb/HT4455 - http://www.vupen.com/english/advisories/2011/0212 - http://www.vupen.com/english/advisories/2010/3046 - https://exchange.xforce.ibmcloud.com/vulnerabilities/63347 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://lists.apple.com/archives/security-announce/2010//Nov/msg00002.html - http://secunia.com/advisories/42314 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11495 - http://support.apple.com/kb/HT4456 - http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html
CVE ID: CVE-2010-3805 State: PUBLISHED Published: 2010-11-20T21:00:00 Last Updated: 2024-08-07T03:26:11.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving WebSockets. NOTE: this may overlap CVE-2010-3254. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43068 - http://support.apple.com/kb/HT4455 - http://www.vupen.com/english/advisories/2011/0212 - http://www.vupen.com/english/advis
p://support.apple.com/kb/HT4455 - http://www.vupen.com/english/advisories/2011/0212 - http://www.vupen.com/english/advisories/2010/3046 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11673 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://lists.apple.com/archives/security-announce/2010//Nov/msg00002.html - http://secunia.com/advisories/42314 - http://support.apple.com/kb/HT4456 - http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html
CVE ID: CVE-2010-3807 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:04.887Z Description: No description available.
CVE ID: CVE-2010-3808 State: PUBLISHED Published: 2010-11-20T21:00:00 Last Updated: 2024-08-07T03:26:11.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly perform a cast of an unspecified variable during processing of editing commands, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43068 - http://support.apple.com/kb/HT4455 - http://www.vupen.com/english/advisories/2011/0212
//secunia.com/advisories/43068 - http://support.apple.com/kb/HT4455 - http://www.vupen.com/english/advisories/2011/0212 - http://www.vupen.com/english/advisories/2010/3046 - https://exchange.xforce.ibmcloud.com/vulnerabilities/63349 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12160 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://lists.apple.com/archives/security-announce/2010//Nov/msg00002.html - http://secunia.com/advisories/42314 - http://support.apple.com/kb/HT4456 - http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html
CVE ID: CVE-2010-3809 State: PUBLISHED Published: 2010-11-20T21:00:00 Last Updated: 2024-08-07T03:26:12.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly perform a cast of an unspecified variable during processing of inline styling, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43068 - http://support.apple.com/kb/HT4455 - http://www.vupen.com/english/advisories/2011/0212 -
secunia.com/advisories/43068 - http://support.apple.com/kb/HT4455 - http://www.vupen.com/english/advisories/2011/0212 - http://www.vupen.com/english/advisories/2010/3046 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://lists.apple.com/archives/security-announce/2010//Nov/msg00002.html - http://secunia.com/advisories/42314 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12079 - http://support.apple.com/kb/HT4456 - http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html
CVE ID: CVE-2010-3810 State: PUBLISHED Published: 2010-11-20T21:00:00 Last Updated: 2024-08-07T03:26:11.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly handle the History object, which allows remote attackers to spoof the location bar's URL or add URLs to the history via a cross-origin attack. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43068 - http://support.apple.com/kb/HT4455 - http://www.vupen.com/english/advisories/2011/0212 - http://www.vupen.com/english/advisories/2010/3046 - http://lists.
- http://www.vupen.com/english/advisories/2011/0212 - http://www.vupen.com/english/advisories/2010/3046 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://lists.apple.com/archives/security-announce/2010//Nov/msg00002.html - http://secunia.com/advisories/42314 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12060 - http://support.apple.com/kb/HT4456 - http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html
CVE ID: CVE-2010-3811 State: PUBLISHED Published: 2010-11-20T21:00:00 Last Updated: 2024-08-07T03:26:11.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving element attributes. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43068 - http://support.apple.com/kb/HT4455 - http://www.vupen.com/english/advisories/2011/0212 - http://www.vupen.com/english/advisories/2010/3046 - h
om/kb/HT4455 - http://www.vupen.com/english/advisories/2011/0212 - http://www.vupen.com/english/advisories/2010/3046 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11538 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://lists.apple.com/archives/security-announce/2010//Nov/msg00002.html - http://secunia.com/advisories/42314 - http://support.apple.com/kb/HT4456 - http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html
CVE ID: CVE-2010-3812 State: PUBLISHED Published: 2010-11-20T21:00:00 Last Updated: 2024-08-07T03:26:12.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the Text::wholeText method in dom/Text.cpp in WebKit, as used in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4; webkitgtk before 1.2.6; and possibly other products allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving Text objects. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2011:039 - http://lists.fedoraprojec
ram Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2011:039 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052906.html - http://secunia.com/advisories/43068 - http://www.zerodayinitiative.com/advisories/ZDI-10-257/ - http://support.apple.com/kb/HT4455 - http://www.vupen.com/english/advisories/2011/0212 - http://www.vupen.com/english/advisories/2010/3046 - http://www.securityfocus.com/bid/44960 - http://www.vupen.com/english/advisories/2011/0216 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11689 - http://secunia.com/advisories/43086 - http://lists.opensuse.org/opensuse-security-announce/2011
tre.oval%3Adef%3A11689 - http://secunia.com/advisories/43086 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://lists.apple.com/archives/security-announce/2010//Nov/msg00002.html - http://secunia.com/advisories/42314 - http://www.redhat.com/support/errata/RHSA-2011-0177.html - http://www.vupen.com/english/advisories/2011/0552 - https://exchange.xforce.ibmcloud.com/vulnerabilities/63350 - http://support.apple.com/kb/HT4456 - https://bugs.webkit.org/show_bug.cgi?id=46848 - http://trac.webkit.org/changeset/68705 - https://bugzilla.redhat.com/show_bug.cgi?id=667022 - http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html
CVE ID: CVE-2010-3813 State: PUBLISHED Published: 2010-11-20T21:00:00 Last Updated: 2024-08-07T03:26:11.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WebCore::HTMLLinkElement::process function in WebCore/html/HTMLLinkElement.cpp in WebKit, as used in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4; webkitgtk before 1.2.6; and possibly other products does not verify whether DNS prefetching is enabled when processing an HTML LINK element, which allows remote attackers to bypass intended access restrictions, as demonstrated by an HTML e-mail message that uses a LINK element for X-Confirm-Reading-To functionality. Addit
ctions, as demonstrated by an HTML e-mail message that uses a LINK element for X-Confirm-Reading-To functionality. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2011:039 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052906.html - https://bugzilla.redhat.com/show_bug.cgi?id=667024 - http://secunia.com/advisories/43068 - http://trac.webkit.org/changeset/63622 - http://support.apple.com/kb/HT4455 - http://www.vupen.com/english/advisories/2011/0212 - http://www.vupen.com/english/advisories/2010/3046 - http://www.vupen.com/english/advisories/2011/0216 - https://oval.cisecurity.org/repository/searc
/advisories/2010/3046 - http://www.vupen.com/english/advisories/2011/0216 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12293 - http://secunia.com/advisories/43086 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://lists.apple.com/archives/security-announce/2010//Nov/msg00002.html - http://secunia.com/advisories/42314 - http://www.redhat.com/support/errata/RHSA-2011-0177.html - http://www.vupen.com/english/advisories/2011/0552 - http://support.apple.com/kb/HT4456 - https://bugs.webkit.org/show_bug.cgi?id=42500 - http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html
CVE ID: CVE-2010-3814 State: PUBLISHED Published: 2010-11-26T19:00:00 Last Updated: 2024-08-07T03:26:12.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the Ins_SHZ function in ttinterp.c in FreeType 2.4.3 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted SHZ bytecode instruction, related to TrueType opcodes, as demonstrated by a PDF document with a crafted embedded font. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43138 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=602221 - http://www.vupen.com/english/advisories/2011
dvisories/43138 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=602221 - http://www.vupen.com/english/advisories/2011/0246 - http://www.vupen.com/english/advisories/2010/3046 - http://www.securitytracker.com/id?1024767 - http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html - http://www.ubuntu.com/usn/USN-1013-1 - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=0edf0986f3be570f5bf90ff245a85c1675f5c9a4 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:236 - http://secunia.com/advisories/42314 - http://security-tracker.debian.org/tracker/CVE-2010-3814 - http://www.securityfocus.com/bid/44643 - http://support.apple.com/kb/HT4456 - http://secu
an.org/tracker/CVE-2010-3814 - http://www.securityfocus.com/bid/44643 - http://support.apple.com/kb/HT4456 - http://secunia.com/advisories/48951 - http://www.debian.org/security/2011/dsa-2155 - http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html - http://support.apple.com/kb/HT4581
CVE ID: CVE-2010-3815 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:05.315Z Description: No description available.
CVE ID: CVE-2010-3816 State: PUBLISHED Published: 2010-11-20T21:00:00 Last Updated: 2024-08-07T03:26:12.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving scrollbars. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43068 - http://support.apple.com/kb/HT4455 - http://www.vupen.com/english/advisories/2011/0212 - http://www.vupen.com/english/advisories/2010/3046 - https://o
4455 - http://www.vupen.com/english/advisories/2011/0212 - http://www.vupen.com/english/advisories/2010/3046 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12255 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://lists.apple.com/archives/security-announce/2010//Nov/msg00002.html - http://secunia.com/advisories/42314 - http://support.apple.com/kb/HT4456 - http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html
CVE ID: CVE-2010-3817 State: PUBLISHED Published: 2010-11-20T21:00:00 Last Updated: 2024-08-07T03:26:12.101Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly perform a cast of an unspecified variable during processing of Cascading Style Sheets (CSS) 3D transforms, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43068 - http://support.apple.com/kb/HT4455 - http://www.vupen.com/eng
ainer: References: - http://secunia.com/advisories/43068 - http://support.apple.com/kb/HT4455 - http://www.vupen.com/english/advisories/2011/0212 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12002 - http://www.vupen.com/english/advisories/2010/3046 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://lists.apple.com/archives/security-announce/2010//Nov/msg00002.html - http://secunia.com/advisories/42314 - http://support.apple.com/kb/HT4456 - http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html
CVE ID: CVE-2010-3818 State: PUBLISHED Published: 2010-11-20T21:00:00 Last Updated: 2024-08-07T03:26:11.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving inline text boxes. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43068 - http://support.apple.com/kb/HT4455 - http://www.vupen.com/english/advisories/2011/0212 - http://www.vupen.com/english/advisories/2010/3046 - ht
m/kb/HT4455 - http://www.vupen.com/english/advisories/2011/0212 - http://www.vupen.com/english/advisories/2010/3046 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12233 - http://lists.apple.com/archives/security-announce/2010//Nov/msg00002.html - http://secunia.com/advisories/42314 - http://support.apple.com/kb/HT4456 - http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html
CVE ID: CVE-2010-3819 State: PUBLISHED Published: 2010-11-20T21:00:00 Last Updated: 2024-08-07T03:26:11.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly perform a cast of an unspecified variable during processing of Cascading Style Sheets (CSS) boxes, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43068 - http://support.apple.com/kb/HT4455 - http://www.vupen.com/english/adv
eferences: - http://secunia.com/advisories/43068 - http://support.apple.com/kb/HT4455 - http://www.vupen.com/english/advisories/2011/0212 - http://www.vupen.com/english/advisories/2010/3046 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://lists.apple.com/archives/security-announce/2010//Nov/msg00002.html - http://secunia.com/advisories/42314 - https://exchange.xforce.ibmcloud.com/vulnerabilities/63358 - http://support.apple.com/kb/HT4456 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11308 - http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html
CVE ID: CVE-2010-3820 State: PUBLISHED Published: 2010-11-20T21:00:00 Last Updated: 2024-08-07T03:26:12.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, accesses uninitialized memory during processing of editable elements, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43068 - http://support.apple.com/kb/HT4455 - http://www.vupen.com/english/advisories/2011/0212 - http://www.vupen.com/englis
8 - http://support.apple.com/kb/HT4455 - http://www.vupen.com/english/advisories/2011/0212 - http://www.vupen.com/english/advisories/2010/3046 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11972 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://lists.apple.com/archives/security-announce/2010//Nov/msg00002.html - http://secunia.com/advisories/42314 - http://support.apple.com/kb/HT4456 - http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html
CVE ID: CVE-2010-3821 State: PUBLISHED Published: 2010-11-20T21:00:00 Last Updated: 2024-08-07T03:26:11.822Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly handle the :first-letter pseudo-element in a Cascading Style Sheets (CSS) token sequence, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43068 - http://support.apple.com/kb/HT4455 - http://www.vupen.co
Container: References: - http://secunia.com/advisories/43068 - http://support.apple.com/kb/HT4455 - http://www.vupen.com/english/advisories/2011/0212 - http://www.vupen.com/english/advisories/2010/3046 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12216 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://lists.apple.com/archives/security-announce/2010//Nov/msg00002.html - http://secunia.com/advisories/42314 - http://support.apple.com/kb/HT4456 - https://exchange.xforce.ibmcloud.com/vulnerabilities/63360 - http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html
CVE ID: CVE-2010-3822 State: PUBLISHED Published: 2010-11-20T21:00:00 Last Updated: 2024-08-07T03:26:11.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, accesses an uninitialized pointer during processing of Cascading Style Sheets (CSS) counter styles, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43068 - http://support.apple.com/kb/HT4455 - http://www.vupen.com/english/advisories/2011/0212