← Database

CVE-2010-1939

HIGH CVSS: 7.6 Published: 2010-05-13 Modified: 2026-06-16

Description

Use-after-free vulnerability in Apple Safari 4.0.5 on Windows allows remote attackers to execute arbitrary code by using window.open to create a popup window for a crafted HTML document, and then calling the parent window's close method, which triggers improper handling of a deleted window object.

Affected Platforms

Microsoft WindowsApple Safari

Weakness Type

CWE-399

References