Security News -  Security Reviews -   Exploits -  Tools -  UNIX Focus -  Windows Focus
SecuriTeam™  Beyond Security®  SecuriTeam™ Home  Ask the Team  Mailing Lists  Advertising Info  Blogs SecuriTeam™ in Your Inbox   E-mail this CVE-2010-0047 to a friend New vulnerability? New tool? Tell us	CVE-2010-0047 Apple WebKit innerHTML element Substitution Remote Code Execution Vulnerability     Credit: The information has been provided by wushi. The original article can be found at: http://www.zerodayinitiative.com/advisories/ZDI-10-029/ Website Security Scan Code Vulnerability Test Network Assessment Tool Detect hidden vulnerabilities Exhaustive automated testing Real-time, continuous security Get guidance from professionals of internal or 3rd party code. scanning for your entire network    CVE-2010-0047 Details Check for CVE-2010-0047 Vulnerability Assessment and Management. Automated Pen Testing for 50 to 50,000 nodes beyondsecurity.com/vulnerability-scanner Vulnerable Systems:  * Apple WebKit on Mac OS X v10.4.11  * Apple WebKit on Mac OS X Server v10.4.11  * Apple WebKit on Mac OS X v10.5.8  * Apple WebKit on Mac OS X Server v10.5.8  * Apple WebKit on Mac OS X v10.6.1 or later  * Apple WebKit on Mac OS X Server v10.6.1  * Apple WebKit on Windows 7  * Apple WebKit on Windows Vista  * Apple WebKit on Windows XP User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists in the WebCore's HTMLObjectElement::renderFallBackContent() method. By rewriting an HTML element via the document's innerHTML() method a memory corruption occurs resulting from a call-after-free. This can be leveraged to execute arbitrary code under the context of the current user. A use-after-free issue exists in the handling of HTML object element fallback content. Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution. This issue is addressed through improved memory reference tracking. Patch Availability: Apple has issued an update to correct this vulnerability. More details can be found at: http://support.apple.com/kb/HT4070 CVE Information: CVE-2010-0047 Disclosure Timeline: 2009-10-21 - Vulnerability reported to vendor 2010-03-15 - Coordinated public release of advisory  Comments on CVE-2010-0047:  Add new comment:  Subject:  Name/Nick/Email:          Chars Left:	All Sections Security News Unix focus Exploits Tools Windows focus Security Reviews
	Security News - Security Reviews - Exploits - Tools - UNIX Focus - Windows Focus

Copyright © 1998-2010 Beyond Security® All rights reserved.
Terms of Use Site Privacy Statement.
SecuriTeam™ is a trademark of Beyond Security®