CVE-2010-1939

Use-after-free vulnerability in Apple Safari 4.0.5 on Windows allows remote attackers to execute arbitrary code by using window.open to create a popup window for a crafted HTML document, and then calling the parent window's close method, which triggers improper handling of a deleted window object.

CVSS v2.0

7.6 HIGHAV:N/AC:H/Au:N/C:C/I:C/A:C

EPSS

14.71% chance of exploitation in the next 30 days, 96th percentile

Published

2010-05-13

Updated

2024-08-07

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/12614
• https://www.exploit-db.com/exploits/12573

References

• CVE Record
• NVD entry

Related

• CVE-2010-1938
• CVE-2010-1944
• CVE-2010-1936
• CVE-2010-1945
• CVE-2010-1935
• CVE-2010-1946