MEDIUM · 4.3

CVE-2010-1131

JavaScriptCore.dll, as used in Apple Safari 4.0.5 on Windows XP SP3, allows remote attackers to cause a denial of service (application crash) via an HTML document composed of many successive occurrenc...

Vulnerability Description

JavaScriptCore.dll, as used in Apple Safari 4.0.5 on Windows XP SP3, allows remote attackers to cause a denial of service (application crash) via an HTML document composed of many successive occurrences of the <object> substring.

CVSS Score

4.3

MEDIUM

AV:N/AC:M/Au:N/C:N/I:N/A:P
Confidentiality
NONE
Integrity
NONE
Availability
PARTIAL

Affected Products

VendorProductVersions
AppleSafari4.0.5
MicrosoftWindows XpAll versions

References

FAQ

What is CVE-2010-1131?

CVE-2010-1131 is a vulnerability with a CVSS score of 4.3 (MEDIUM). JavaScriptCore.dll, as used in Apple Safari 4.0.5 on Windows XP SP3, allows remote attackers to cause a denial of service (application crash) via an HTML document composed of many successive occurrenc...

How severe is CVE-2010-1131?

CVE-2010-1131 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2010-1131?

Check the references section above for vendor advisories and patch information. Affected products include: Apple Safari, Microsoft Windows Xp.