VYPR
Unrated severityNVD Advisory· Published Sep 7, 2010· Updated Apr 29, 2026

CVE-2010-3257

CVE-2010-3257

Description

Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 6.0.472.53, and webkitgtk before 1.2.6, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving element focus.

Affected products

7
  • cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
    Range: <4.1.3
  • cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
    Range: <6.0.472.53
  • cpe:2.3:a:webkitgtk:webkitgtk:*:*:*:*:*:*:*:*
    Range: <1.2.6
  • cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
    Range: <4.2
  • cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*+ 2 more
    • cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:10.10:*:*:*:*:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

21

News mentions

0

No linked articles in our index yet.