Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

apple safari 4.0 vulnerabilities and exploits

(subscribe to this query)
9.3
CVSSv2

CVE-2010-0045

Apple Safari prior to 4.0.5 on Windows does not properly validate external URL schemes, which allows remote malicious users to open local files and execute arbitrary code via a crafted HTML document.
Apple SafariApple Safari 4.0Apple Safari 4.0.1Apple Safari 4.0.2Apple Safari 4.0.3
8.8
CVSSv3

CVE-2010-0048

Use-after-free vulnerability in WebKit in Apple Safari prior to 4.0.5 allows remote malicious users to execute arbitrary code or cause a denial of service (application crash) via a crafted XML document.
Apple SafariApple Safari 4.0Apple Safari 4.0.1Apple Safari 4.0.2Apple Safari 4.0.3
4.3
CVSSv2

CVE-2009-2419

Use-after-free vulnerability in the servePendingRequests function in WebCore in WebKit in Apple Safari 4.0 and 4.0.1 allows remote malicious users to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted HTML document that references a zer...
Apple Safari 4.0Apple Safari 4.0.1
5
CVSSv2

CVE-2009-3272

Stack consumption vulnerability in WebKit.dll in WebKit in Apple Safari 3.2.3, and possibly other versions prior to 4.1.2, allows remote malicious users to cause a denial of service (application crash) via JavaScript code that calls eval on a long string composed of A/ sequences.
Apple Safari 3.2.3Apple Safari 4.0Apple Safari 4.0.0bApple Safari 4.0.2Apple Safari 4.0.3
9.3
CVSSv2

CVE-2010-0049

Use-after-free vulnerability in WebKit in Apple Safari prior to 4.0.5 allows remote malicious users to execute arbitrary code or cause a denial of service (application crash) via HTML elements with right-to-left (RTL) text directionality.
Apple SafariApple Safari 4.0Apple Safari 4.0.0bApple Safari 4.0.1Apple Safari 4.0.2Apple Safari 4.0.3
9.3
CVSSv2

CVE-2010-0052

Use-after-free vulnerability in WebKit in Apple Safari prior to 4.0.5 allows remote malicious users to execute arbitrary code or cause a denial of service (application crash) via vectors related to "callbacks for HTML elements."
Apple SafariApple Safari 4.0Apple Safari 4.0.0bApple Safari 4.0.1Apple Safari 4.0.2Apple Safari 4.0.3
9.3
CVSSv2

CVE-2010-0054

Use-after-free vulnerability in WebKit in Apple Safari prior to 4.0.5 allows remote malicious users to execute arbitrary code or cause a denial of service (application crash) via vectors involving HTML IMG elements.
Apple SafariApple Safari 4.0Apple Safari 4.0.0bApple Safari 4.0.1Apple Safari 4.0.2Apple Safari 4.0.3
4.3
CVSSv2

CVE-2010-0051

WebKit in Apple Safari prior to 4.0.5 does not properly validate the cross-origin loading of stylesheets, which allows remote malicious users to obtain sensitive information via a crafted HTML document. NOTE: this might overlap CVE-2010-0651.
Apple SafariApple Safari 4.0Apple Safari 4.0.0bApple Safari 4.0.1Apple Safari 4.0.2Apple Safari 4.0.3
9.3
CVSSv2

CVE-2010-0040

Integer overflow in ColorSync in Apple Safari prior to 4.0.5 on Windows, and iTunes prior to 9.1, allows remote malicious users to execute arbitrary code or cause a denial of service (application crash) via an image with a crafted color profile that triggers a heap-based buffer o...
Apple SafariApple Safari 4.0Apple Safari 4.0.0bApple Safari 4.0.1Apple Safari 4.0.2Apple Safari 4.0.3
4.3
CVSSv2

CVE-2010-0042

ImageIO in Apple Safari prior to 4.0.5 and iTunes prior to 9.1 on Windows does not ensure that memory access is associated with initialized memory, which allows remote malicious users to obtain potentially sensitive information from process memory via a crafted TIFF image.
Apple SafariApple Safari 4.0Apple Safari 4.0.0bApple Safari 4.0.1Apple Safari 4.0.2Apple Safari 4.0.3
Preferred Score:
CVSSv3
CVSSv2
CVSSv3
CVSSv4
EPSS
VMScore
Recommendations:
intel(r) me driver pack installer enginesavada | website builder for wordpress & woocommerceCVE-2024-31858intel(r) mlc softwarerank math seo – ai seo tools to dominate seo rankingstemplate injectionCVE-2024-36280CVE-2025-24016information disclosureCVE-2024-36274CVE-2024-57605injectionCVE-2025-24472
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook