HTTP: Apple Safari Webkit Button First-Letter Style Rendering Code Execution

This signature detects attempts to exploit a known code execution vulnerability in Apple's Safari Webkit. It is due to a use after free error when processing "first-letter" CSS style. A remote attacker can exploit this by enticing a user to open a maliciously crafted file on a target system. A successful attack can result in arbitrary code execution with the privileges of the targeted user.

Extended Description

WebKit is prone to a remote code-execution vulnerability due to a use-after-free error. An attacker can exploit this issue by enticing an unsuspecting victim into viewing a malicious webpage. Successful exploits may allow the attacker to execute arbitrary code in the context of the application. Failed exploit attempts will result in a denial-of-service condition. NOTE: This issue was previously covered in BID 40620 (Apple Safari Prior to 5.0 and 4.1 Multiple Security Vulnerabilities) but has been given its own record to better document it.

Affected Products

Apple ipod_touch,Apple safari

References

BugTraq: 40644

CVE: CVE-2010-1392

URL: http://support.apple.com/kb/HT4196

Short Name

HTTP:STC:SAFARI:WEBKIT-1ST-LTR

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Apple Safari Webkit Button First-Letter Style Rendering Code Execution

Extended Description

Affected Products

References

Found a potential security threat?