CVE-2010-0050

Description

Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an HTML document with improperly nested tags.

Affected Platforms

Weakness Type

CWE-416

References

• http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html
• http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html
• http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041383.html
• http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041432.html
• http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041436.html
• http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html