Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerability · NVD

CVE-2010-1770

CVE-2010-1770, Severity pending severity (CVSS —): 3 tracked apps concerned, all fixed or indeterminable on their current version.

Severity (CVSS)
-
Exploitation
4.8 %

EPSS, predicted over 30 days

Tracked apps
3
Still exposed
0

WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, Apple Safari before 4.1 on Mac OS X 10.4, and Google Chrome before 5.0.375.70 does not properly handle a transformation of a text node that has the IBM1147 character set, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document containing a BR element, related to a "type checking issue."

EPSS 4.76% above median percentile 91.3%

Tracked apps referencing this CVE

For each app: the affected range, the fixing version, and where the tracked app stands today.

  • Safari macOS com.apple.Safari
    Affected ≤4.0.5 Fixed in > 4.0.5 Latest tracked - undetermined
  • Chrome macOS com.google.Chrome
    Affected <5.0.375.70 Fixed in 5.0.375.70 Latest tracked - undetermined
  • Google Chrome Windows winget:Google.Chrome
    Affected <5.0.375.70 Fixed in 5.0.375.70 Latest tracked 152.0.7977.65 patched

NVD references 12 distinct products for this CVE : only those tracked by Scout (mobile and desktop catalog apps) are listed above. Libraries, servers and out-of-scope products do not appear here. Full list on NVD ↗

Vulnerable CPE configurations (6)
Vendor Product Versions
apple safari
All platforms (wildcard)
 ≤4.0.5
apple webkit
All platforms (wildcard)
 -
apple safari
All platforms (wildcard)
 ≤4.0.5
apple webkit
All platforms (wildcard)
 -
google chrome
All platforms (wildcard)
 <5.0.375.70
google chrome
All platforms (wildcard)
 <5.0.375.70
View on NVD ↗ Advisory · lists.apple.com Advisory · code.google.com Advisory · googlechromereleases.blogspot.com