WebKit Element Run-In Styling Use-After-Free Remote Code Execution Vulnerability
2015年7月21日
危険度: : 緊急
CVE識別番号: CVE-2010-1806
概要
Use-after-free vulnerability in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via run-in styling in an element, related to object pointers.
トレンドマイクロの対策
Apply associated Trend Micro DPI Rules.
対応方法
Trend Micro Deep Security DPI Rule Number: 1004434
Trend Micro Deep Security DPI Rule Name: 1004434 - WebKit Element Run-In Styling Use-After-Free Remote Code Execution Vulnerability
影響を受けるソフトウェア
- apple safari 4.0
- apple safari 4.0.0b
- apple safari 4.0.1
- apple safari 4.0.2
- apple safari 4.0.3
- apple safari 4.0.4
- apple safari 4.0.5
- apple safari 4.1
- apple safari 5.0
- apple safari 5.0.1