| Vulnerability Name: | CVE-2010-1029 (CCN-56524) |
| Assigned: | 2010-02-24 |
| Published: | 2010-02-24 |
| Updated: | 2021-05-23 |
| Summary: | Stack consumption vulnerability in the WebCore::CSSSelector function in WebKit, as used in Apple Safari 4.0.4, Apple Safari on iPhone OS and iPhone OS for iPod touch, and Google Chrome 4.0.249, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a STYLE element composed of a large number of *> sequences.
|
| CVSS v3 Severity: | 5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)| Exploitability Metrics: | Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None | | Scope: | Scope (S): Unchanged
| | Impact Metrics: | Confidentiality (C): None
Integrity (I): None
Availibility (A): Low |
|
| CVSS v2 Severity: | 5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P)
4.2 Medium (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P/E:POC/RL:U/RC:UR)| Exploitability Metrics: | Access Vector (AV):
Access Complexity (AC):
Authentication (Au): | | Impact Metrics: | Confidentiality (C):
Integrity (I):
Availibility (A): |
5.0 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P)
4.2 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P/E:POC/RL:U/RC:UR)| Exploitability Metrics: | Access Vector (AV):
Access Complexity (AC):
Athentication (Au):
| | Impact Metrics: | Confidentiality (C):
Integrity (I):
Availibility (A): |
|
| Vulnerability Type: | CWE-399
|
| Vulnerability Consequences: | Denial of Service |
| References: | Source: MITRE
Type: CNA
CVE-2010-1029
Source: SUSE
Type: UNKNOWN
SUSE-SR:2011:002
Source: SECUNIA
Type: UNKNOWN
43068
Source: CCN
Type: Apple Safari Web site
Apple - Safari
Source: EXPLOIT-DB
Type: Exploit
11567
Source: EXPLOIT-DB
Type: Exploit
11574
Source: CCN
Type: Google Chrome Web site
Google Chrome
Source: BID
Type: Exploit
38398
Source: CCN
Type: BID-38398
WebKit Style Tag Remote Denial of Service Vulnerability
Source: VUPEN
Type: UNKNOWN
ADV-2011-0212
Source: XF
Type: UNKNOWN
safari-chrome-style-dos(56524)
Source: XF
Type: UNKNOWN
safari-chrome-css-bo(56524)
Source: XF
Type: UNKNOWN
webkit-cssselector-dos(56527)
Source: OVAL
Type: UNKNOWN
oval:org.mitre.oval:def:14301
Source: EXPLOIT-DB
Type: EXPLOIT
Offensive Security Exploit Database [02-24-2010]
Source: SUSE
Type: SUSE-SR:2011:002
SUSE Security Summary Report
|
| Vulnerable Configuration: | Configuration 1:
cpe:/a:apple:safari:4.0.4:*:*:*:*:*:*:*
Configuration 2:
cpe:/a:google:chrome:4.0.249.0:*:*:*:*:*:*:*
Configuration 3:
cpe:/a:apple:safari:*:*:*:*:*:*:*:*AND cpe:/o:apple:iphone_os:2.2:*:*:*:*:*:*:*OR cpe:/o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*OR cpe:/o:apple:iphone_os:2.0.2:-:ipodtouch:*:*:*:*:*OR cpe:/o:apple:iphone_os:2.0.2:-:iphone:*:*:*:*:*OR cpe:/o:apple:iphone_os:1.1.4:-:ipodtouch:*:*:*:*:*OR cpe:/o:apple:iphone_os:1.1.2:-:iphone:*:*:*:*:*OR cpe:/o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*OR cpe:/o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*OR cpe:/o:apple:iphone_os:2.1:-:iphone:*:*:*:*:*OR cpe:/o:apple:iphone_os:1.1.5:-:ipodtouch:*:*:*:*:*OR cpe:/o:apple:iphone_os:1.0:*:*:*:*:*:*:*OR cpe:/o:apple:iphone_os:2.2.1:-:ipodtouch:*:*:*:*:*OR cpe:/o:apple:iphone_os:1.1.2:-:ipodtouch:*:*:*:*:*OR cpe:/o:apple:iphone_os:1.1.4:-:iphone:*:*:*:*:*OR cpe:/o:apple:iphone_os:3.0.1:-:iphone:*:*:*:*:*OR cpe:/o:apple:iphone_os:1.0.1:-:iphone:*:*:*:*:*OR cpe:/o:apple:iphone_os:2.2:-:iphone:*:*:*:*:*OR cpe:/o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*OR cpe:/o:apple:iphone_os:3.0.1:*:*:*:*:*:*:*OR cpe:/o:apple:iphone_os:1.1.3:-:ipodtouch:*:*:*:*:*OR cpe:/o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*OR cpe:/o:apple:iphone_os:1.1:*:*:*:*:*:*:*OR cpe:/o:apple:iphone_os:2.0.1:-:iphone:*:*:*:*:*OR cpe:/o:apple:iphone_os:3.1.2:-:ipodtouch:*:*:*:*:*OR cpe:/o:apple:iphone_os:2.1:*:*:*:*:*:*:*OR cpe:/o:apple:iphone_os:3.0:-:ipodtouch:*:*:*:*:*OR cpe:/o:apple:iphone_os:1.0.2:-:iphone:*:*:*:*:*OR cpe:/o:apple:iphone_os:2.2:-:ipodtouch:*:*:*:*:*OR cpe:/o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*OR cpe:/o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*OR cpe:/o:apple:iphone_os:1.1.0:-:iphone:*:*:*:*:*OR cpe:/o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*OR cpe:/o:apple:iphone_os:1.1.5:-:iphone:*:*:*:*:*OR cpe:/o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*OR cpe:/o:apple:iphone_os:*:*:*:*:*:*:*:*OR cpe:/o:apple:iphone_os:2.1:-:ipodtouch:*:*:*:*:*OR cpe:/o:apple:iphone_os:3.0:*:*:*:*:*:*:*OR cpe:/o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*OR cpe:/o:apple:iphone_os:1.1.1:-:iphone:*:*:*:*:*OR cpe:/o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*OR cpe:/o:apple:iphone_os:3.1.2:*:*:*:*:*:*:*OR cpe:/o:apple:iphone_os:2.0.1:-:ipodtouch:*:*:*:*:*OR cpe:/o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*OR cpe:/o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*OR cpe:/o:apple:iphone_os:2.2.1:-:iphone:*:*:*:*:*OR cpe:/o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*OR cpe:/o:apple:iphone_os:2.0.0:-:iphone:*:*:*:*:*OR cpe:/o:apple:iphone_os:1.1.0:-:ipodtouch:*:*:*:*:*OR cpe:/o:apple:iphone_os:2.0.0:-:ipodtouch:*:*:*:*:*OR cpe:/o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*OR cpe:/o:apple:iphone_os:2.0:*:*:*:*:*:*:*OR cpe:/o:apple:iphone_os:1.1.3:-:iphone:*:*:*:*:*
Configuration CCN 1:
cpe:/a:apple:webkit:*:*:*:*:*:*:*:*
 Denotes that component is vulnerable |
| Vulnerability Name: | CVE-2010-1029 (CCN-56527) |
| Assigned: | 2010-02-24 |
| Published: | 2010-02-24 |
| Updated: | 2019-09-26 |
| Summary: | Stack consumption vulnerability in the WebCore::CSSSelector function in WebKit, as used in Apple Safari 4.0.4, Apple Safari on iPhone OS and iPhone OS for iPod touch, and Google Chrome 4.0.249, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a STYLE element composed of a large number of *> sequences.
|
| CVSS v3 Severity: | 5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)| Exploitability Metrics: | Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None | | Scope: | Scope (S): Unchanged
| | Impact Metrics: | Confidentiality (C): None
Integrity (I): None
Availibility (A): Low |
|
| CVSS v2 Severity: | 5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P)
4.2 Medium (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P/E:POC/RL:U/RC:UR)| Exploitability Metrics: | Access Vector (AV):
Access Complexity (AC):
Authentication (Au): | | Impact Metrics: | Confidentiality (C):
Integrity (I):
Availibility (A): |
5.0 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P)
4.2 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P/E:POC/RL:U/RC:UR)| Exploitability Metrics: | Access Vector (AV):
Access Complexity (AC):
Athentication (Au):
| | Impact Metrics: | Confidentiality (C):
Integrity (I):
Availibility (A): |
|
| Vulnerability Type: | CWE-399
|
| Vulnerability Consequences: | Denial of Service |
| References: | Source: MITRE
Type: CNA
CVE-2010-1029
Source: SUSE
Type: UNKNOWN
SUSE-SR:2011:002
Source: SECUNIA
Type: UNKNOWN
43068
Source: CCN
Type: WebKit Web site
WebKit
Source: EXPLOIT-DB
Type: Exploit
11567
Source: EXPLOIT-DB
Type: Exploit
11574
Source: BID
Type: Exploit
38398
Source: CCN
Type: BID-38398
WebKit Style Tag Remote Denial of Service Vulnerability
Source: VUPEN
Type: UNKNOWN
ADV-2011-0212
Source: XF
Type: UNKNOWN
safari-chrome-css-bo(56524)
Source: XF
Type: UNKNOWN
webkit-cssselector-dos(56527)
Source: XF
Type: UNKNOWN
webkit-cssselector-dos(56527)
Source: OVAL
Type: UNKNOWN
oval:org.mitre.oval:def:14301
Source: EXPLOIT-DB
Type: EXPLOIT
Offensive Security Exploit Database [02-24-2010]
Source: SUSE
Type: SUSE-SR:2011:002
SUSE Security Summary Report
|
| Oval Definitions |
| Definition ID | Class | Title | Last Modified |
|---|
| oval:org.opensuse.security:def:20101029 | V | CVE-2010-1029 | 2015-11-16 | | oval:org.mitre.oval:def:14301 | V | Stack consumption vulnerability in the WebCore::CSSSelector function in WebKit, as used in Apple Safari 4.0.4, Apple Safari on iPhone OS and iPhone OS for iPod touch, and Google Chrome 4.0.249, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a STYLE element composed of a large number of *> sequences. | 2014-04-07 |
|
| BACK |