CVE-2010-1939

Use-after-free vulnerability in Apple Safari 4.0.5 on Windows allows remote attackers to execute arbitrary code by using window.open to create a popup window for a crafted HTML document, and then calling the parent window's close method, which triggers improper handling of a deleted window object.

CVSS v2.0 NVD

7.6 HIGHAV:N/AC:H/Au:N/C:C/I:C/A:C

EPSS

14.71% chance of exploitation in the next 30 days, 97th percentile

Published

2010-05-13

Updated

2024-08-07

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/12614
• https://www.exploit-db.com/exploits/12573

Security advisories

• http://secunia.com/advisories/39670
• http://www.vupen.com/english/advisories/2010/1097
• http://www.kb.cert.org/vuls/id/943165
• http://www.securityfocus.com/bid/39990

References

• CVE Record
• NVD entry