Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

apple safari 4.0.0b vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2009-3272
Stack consumption vulnerability in WebKit.dll in WebKit in Apple Safari 3.2.3, and possibly other versions prior to 4.1.2, allows remote malicious users to cause a denial of service (application crash) via JavaScript code that calls eval on a long string composed of A/ sequences.
Apple Safari 4.0.3Apple Safari 4.0Apple Safari 3.2.3Apple Safari 4.0.0bApple Safari 4.0.2
NA
CVE-2010-0042
ImageIO in Apple Safari prior to 4.0.5 and iTunes prior to 9.1 on Windows does not ensure that memory access is associated with initialized memory, which allows remote malicious users to obtain potentially sensitive information from process memory via a crafted TIFF image.
Apple Safari 4.0.1Apple Safari 4.0.0bApple Safari 4.0Apple SafariApple Safari 4.0.3Apple Safari 4.0.2
NA
CVE-2010-0040
Integer overflow in ColorSync in Apple Safari prior to 4.0.5 on Windows, and iTunes prior to 9.1, allows remote malicious users to execute arbitrary code or cause a denial of service (application crash) via an image with a crafted color profile that triggers a heap-based buffer o...
Apple Safari 4.0.0bApple Safari 4.0Apple SafariApple Safari 4.0.3Apple Safari 4.0.2Apple Safari 4.0.1
NA
CVE-2010-0041
ImageIO in Apple Safari prior to 4.0.5 and iTunes prior to 9.1 on Windows does not ensure that memory access is associated with initialized memory, which allows remote malicious users to obtain potentially sensitive information from process memory via a crafted BMP image.
Apple Safari 4.0.0bApple Safari 4.0Apple Safari 4.0.2Apple Safari 4.0.1Apple SafariApple Safari 4.0.3
NA
CVE-2010-0043
ImageIO in Apple Safari prior to 4.0.5 and iTunes prior to 9.1 on Windows allows remote malicious users to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted TIFF image.
Apple Safari 4.0.3Apple Safari 4.0.2Apple Safari 4.0Apple Safari 4.0.1Apple Safari 4.0.0bApple Safari
NA
CVE-2010-0044
PubSub in Apple Safari prior to 4.0.5 does not properly implement use of the Accept Cookies preference to block cookies, which makes it easier for remote web servers to track users by setting a cookie in a (1) RSS or (2) Atom feed.
Apple SafariApple Safari 4.0Apple Safari 4.0.2Apple Safari 4.0.3Apple Safari 4.0.0bApple Safari 4.0.1
NA
CVE-2010-0046
The Cascading Style Sheets (CSS) implementation in WebKit in Apple Safari prior to 4.0.5 allows remote malicious users to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted format arguments.
Apple Safari 4.0.0bApple Safari 4.0.1Apple Safari 4.0.2Apple Safari 4.0.3Apple SafariApple Safari 4.0
NA
CVE-2010-0049
Use-after-free vulnerability in WebKit in Apple Safari prior to 4.0.5 allows remote malicious users to execute arbitrary code or cause a denial of service (application crash) via HTML elements with right-to-left (RTL) text directionality.
Apple Safari 4.0.2Apple Safari 4.0.3Apple Safari 4.0.0bApple Safari 4.0Apple SafariApple Safari 4.0.1
NA
CVE-2010-0051
WebKit in Apple Safari prior to 4.0.5 does not properly validate the cross-origin loading of stylesheets, which allows remote malicious users to obtain sensitive information via a crafted HTML document. NOTE: this might overlap CVE-2010-0651.
Apple Safari 4.0.2Apple Safari 4.0.1Apple SafariApple Safari 4.0.3Apple Safari 4.0.0bApple Safari 4.0
NA
CVE-2010-0054
Use-after-free vulnerability in WebKit in Apple Safari prior to 4.0.5 allows remote malicious users to execute arbitrary code or cause a denial of service (application crash) via vectors involving HTML IMG elements.
Apple Safari 4.0Apple SafariApple Safari 4.0.1Apple Safari 4.0.0bApple Safari 4.0.3Apple Safari 4.0.2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook