WebKit Element Run-In Styling Use-After-Free Remote Code Execution Vulnerability

Bugtraq ID:	43049
Class:	Unknown
CVE:	CVE-2010-1806
Remote:	Yes
Local:	No
Published:	Sep 07 2010 12:00AM
Updated:	Nov 22 2010 06:16PM
Credit:	wushi
Vulnerable:	WebKit Open Source Project WebKit 0 Apple Safari 4.0.5 for Windows Apple Safari 4.0.5 Apple Safari 4.0.4 for Windows Apple Safari 4.0.4 Apple Safari 4.0.3 for Windows Apple Safari 4.0.3 Apple Safari 4.0.2 for Windows Apple Safari 4.0.2 Apple Safari 4.0.1 Apple Safari 5.0.1 for Windows Apple Safari 5.0.1 Apple Safari 5.0 for Windows Apple Safari 5.0 Apple Safari 4.1.1 Apple Safari 4.1 Apple Safari 4 for Windows Apple Safari 4 Apple iPod Touch 3.1.3 Apple iPod Touch 3.1.2 Apple iPod Touch 3.1.1 Apple iPod Touch 2.2.1 Apple iPod Touch 3.0 Apple iPod Touch 2.2 Apple iPod Touch 2.1 Apple iPhone 4.0.1 Apple iPhone 3.2.1 Apple iPhone 3.1.3 Apple iPhone 3.1.2 Apple iPhone 3.0.1 Apple iPhone 2.2.1 Apple iPhone 2.0.2 Apple iPhone 2.0.1 Apple iPhone 4.1 Apple iPhone 4.0 Apple iPhone 3.2 Apple iPhone 3.1 Apple iPhone 3.0 Apple iPhone 2.2 Apple iPhone 2.1 Apple iPhone 2.0 Apple iPad 3.2.1 Apple iPad 3.2.2 Apple iPad 3.2 Apple iPad 0 Apple iOS 4.0.2 Apple iOS 4.0.1 Apple iOS 3.2.2 Apple iOS 3.2.1 Apple iOS 4.2 beta Apple iOS 4.1 Apple iOS 4 Apple iOS 3.2
Not Vulnerable:	Apple Safari 4.1.2 for Windows Apple Safari 5.0.2 for Windows Apple Safari 5.0.2 Apple Safari 4.1.2 Apple iOS 4.2

WebKit Element Run-In Styling Use-After-Free Remote Code Execution Vulnerability

WebKit is prone to a remote code-execution vulnerability.

An attacker can exploit this issue by tricking an unsuspecting victim into viewing a web page containing malicious content. A successful exploit will result in the execution of arbitrary attacker-supplied code in the context of the user running the affected application.

This issue has been addressed in Apple Safari 5.0.2 and Safari 4.1.2.

WebKit Element Run-In Styling Use-After-Free Remote Code Execution Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

WebKit Element Run-In Styling Use-After-Free Remote Code Execution Vulnerability

Solution:
Updates are available. Please see the referenced advisory for details.

WebKit Element Run-In Styling Use-After-Free Remote Code Execution Vulnerability

References:

• Webkit Homepage (Webkit)
  
• ZDI-10-170 Apple Safari Webkit Runin Remote Code Execution Vulnerability (Zero Day Initiative)