CVE-2010-3116

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0390%

EPSS Percentile39.37th

Published2010年8月24日

Last Modified2026年4月29日

Vulnerability Description

Multiple use-after-free vulnerabilities in WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6, allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to improper handling of MIME types by plug-ins.

Affected Platforms (CPE)

📦

Google

Chrome

< 5.0.375.127

📦

Apple

Safari

< 4.1.3

📦

Apple

Safari

>= 5.0 and < 5.0.3

💻

Apple

Iphone Os

< 4.2

📦

Webkitgtk

< 1.2.6

💻

Canonical

Ubuntu Linux

= 9.10

💻

Canonical

Ubuntu Linux

= 10.04

💻

Canonical

Ubuntu Linux

= 10.10

References & Advisories

🔗 http://code.google.com/p/chromium/issues/detail?id=50515

🔗 http://code.google.com/p/chromium/issues/detail?id=51835

🔗 http://googlechromereleases.blogspot.com/2010/08/stable-channel-update_19.html

🔗 http://lists.apple.com/archives/security-announce/2010//Nov/msg00002.html

🔗 http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html

🔗 http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html

🔗 http://secunia.com/advisories/41856

🔗 http://secunia.com/advisories/42314

Vulnerability Description

Affected Platforms (CPE)

Chrome

Safari

Safari

Iphone Os

Webkitgtk

Ubuntu Linux

Ubuntu Linux

Ubuntu Linux

References & Advisories

関連する脆弱性情報