// For flags

CVE-2010-1179

Apple iOS Safari - Bad 'VML' Remote Denial of Service

Time Line
Published
2024-03-19
Updated
2024-03-19
Firt exploit
2024-03-19
Overview
Descriptions (2)
NVD, NVD
CWE (1)
CWE-189: Numeric Errors
CAPEC (-)
Risk
CVSS Score
9.8 Critical
SSVC
-
KEV
-
EPSS
1.7%
Affected Products (-)
Vendors (1)
apple
Products (2)
safari, iphone_os
Versions (1)
3.1.3
Intel Resources (-)
Advisories (-)
-
Exploits (-)
-
Plugins (-)
-
References (4)
General (-)
Exploits & POcs (4)
exploit-db, yolasite ...
Patches (-)
Advisories (-)
Summary
Descriptions

Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a large integer in the numcolors attribute of a recolorinfo element in a VML file, possibly a related issue to CVE-2007-0024.

Safari en Apple iPhone OS v3.1.3 y en iPod touch permite a atacantes remotos provocar una denegación de servicio (caída de la aplicación) o posiblemente ejecutar código de su elección a través un intero "large" (grande) en un atributo numcolors de un elemento recolorinfo en un fichero VML. Posiblemente es un asunto relacionado con el CVE-2007-0024.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Network
Attack Complexity
Medium
Authentication
None
Confidentiality
Complete
Integrity
Complete
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2010-03-26 First Exploit
  • 2010-03-29 CVE Reserved
  • 2010-03-29 CVE Published
  • 2024-07-01 EPSS Updated
  • 2024-08-07 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
  • CWE-189: Numeric Errors
CAPEC
Threat Intelligence Resources (0)
Security Advisory details:

Select an advisory to view details here.

Select an exploit to view details here.

Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Apple
Search vendor "Apple"
 Safari
Search vendor "Apple" for product "Safari"
*-
Affected
in Apple
Search vendor "Apple"
 Iphone Os
Search vendor "Apple" for product "Iphone Os"
 3.1.3
Search vendor "Apple" for product "Iphone Os" and version "3.1.3"
-
Safe
Apple
Search vendor "Apple"
 Safari
Search vendor "Apple" for product "Safari"
*-
Affected
in Apple
Search vendor "Apple"
 Iphone Os
Search vendor "Apple" for product "Iphone Os"
 3.1.3
Search vendor "Apple" for product "Iphone Os" and version "3.1.3"
ipodtouch
Safe