VulnerabilityModified
CVE-2010-1814
WebKit in Apple iOS before 4.1 on the iPhone and iPod touch, and webkitgtk before 1.2.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors involving form menus.
MEDIUM 6.8EPSS 4.22%
Does this matter?
Lower severity and a low EPSS score (4.22%). Track it; it rarely justifies an emergency change on its own.
Description
WebKit in Apple iOS before 4.1 on the iPhone and iPod touch, and webkitgtk before 1.2.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors involving form menus.
- CVSS 2.0
- 6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
- EPSS
- 4.22% probability · 90th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- apple/iphone os · webkitgtk/webkitgtk · canonical/ubuntu linux
- Source
- product-security@apple.com
References
- http://lists.apple.com/archives/security-announce/2010//Nov/msg00002.htmlMailing List, Vendor Advisory
- http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.htmlMailing List, Vendor Advisory
- http://lists.apple.com/archives/security-announce/2010//Sep/msg00002.htmlMailing List, Vendor Advisory
- http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.htmlMailing List, Third Party Advisory
- http://secunia.com/advisories/41856Third Party Advisory
- http://secunia.com/advisories/42314Third Party Advisory
- http://secunia.com/advisories/43068Third Party Advisory
- http://secunia.com/advisories/43086Third Party Advisory
- http://support.apple.com/kb/HT4334Vendor Advisory
- http://support.apple.com/kb/HT4455Vendor Advisory
- http://support.apple.com/kb/HT4456Vendor Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:039Third Party Advisory
- http://www.redhat.com/support/errata/RHSA-2011-0177.htmlThird Party Advisory
- http://www.securityfocus.com/bid/43083Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/USN-1006-1Third Party Advisory
- http://www.vupen.com/english/advisories/2010/2722Third Party Advisory, Vendor Advisory
- http://www.vupen.com/english/advisories/2011/0212Third Party Advisory
- http://www.vupen.com/english/advisories/2011/0216Third Party Advisory
- http://www.vupen.com/english/advisories/2011/0552Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/61701Third Party Advisory, VDB Entry
- http://lists.apple.com/archives/security-announce/2010//Nov/msg00002.htmlMailing List, Vendor Advisory
- http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.htmlMailing List, Vendor Advisory
- http://lists.apple.com/archives/security-announce/2010//Sep/msg00002.htmlMailing List, Vendor Advisory
- http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.htmlMailing List, Third Party Advisory
- http://secunia.com/advisories/41856Third Party Advisory
- http://secunia.com/advisories/42314Third Party Advisory
- http://secunia.com/advisories/43068Third Party Advisory
- http://secunia.com/advisories/43086Third Party Advisory
- http://support.apple.com/kb/HT4334Vendor Advisory
- http://support.apple.com/kb/HT4455Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.