CVE-2010-1029 : Stack consumption vulnerability in the WebCore::CSSSelector function in WebKit,

Stack consumption vulnerability in the WebCore::CSSSelector function in WebKit, as used in Apple Safari 4.0.4, Apple Safari on iPhone OS and iPhone OS for iPod touch, and Google Chrome 4.0.249, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a STYLE element composed of a large number of *> sequences.

Published 2010-03-19 21:30:00

Updated 2021-05-23 00:52:45

Source MITRE

View at NVD, CVE.org

Vulnerability category: Execute codeDenial of service

Products affected by CVE-2010-1029

Apple » Safari
cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
Matching versions
When used together with: Apple » Iphone Os
When used together with: Apple » Iphone Os » Version: 1.0
When used together with: Apple » Iphone Os » Version: 1.0.0
When used together with: Apple » Iphone Os » Version: 1.0.1
When used together with: Apple » Iphone Os » Version: 1.0.1 Iphone Edition
When used together with: Apple » Iphone Os » Version: 1.0.2
When used together with: Apple » Iphone Os » Version: 1.0.2 Iphone Edition
When used together with: Apple » Iphone Os » Version: 1.1
When used together with: Apple » Iphone Os » Version: 1.1.0
When used together with: Apple » Iphone Os » Version: 1.1.0 Iphone Edition
When used together with: Apple » Iphone Os » Version: 1.1.0 Ipodtouch Edition
When used together with: Apple » Iphone Os » Version: 1.1.1
When used together with: Apple » Iphone Os » Version: 1.1.1 Iphone Edition
When used together with: Apple » Iphone Os » Version: 1.1.2
When used together with: Apple » Iphone Os » Version: 1.1.2 Iphone Edition
When used together with: Apple » Iphone Os » Version: 1.1.2 Ipodtouch Edition
When used together with: Apple » Iphone Os » Version: 1.1.3
When used together with: Apple » Iphone Os » Version: 1.1.3 Iphone Edition
When used together with: Apple » Iphone Os » Version: 1.1.3 Ipodtouch Edition
When used together with: Apple » Iphone Os » Version: 1.1.4
When used together with: Apple » Iphone Os » Version: 1.1.4 Iphone Edition
When used together with: Apple » Iphone Os » Version: 1.1.4 Ipodtouch Edition
When used together with: Apple » Iphone Os » Version: 1.1.5
When used together with: Apple » Iphone Os » Version: 1.1.5 Iphone Edition
When used together with: Apple » Iphone Os » Version: 1.1.5 Ipodtouch Edition
When used together with: Apple » Iphone Os » Version: 2.0
When used together with: Apple » Iphone Os » Version: 2.0.0
When used together with: Apple » Iphone Os » Version: 2.0.0 Iphone Edition
When used together with: Apple » Iphone Os » Version: 2.0.0 Ipodtouch Edition
When used together with: Apple » Iphone Os » Version: 2.0.1
When used together with: Apple » Iphone Os » Version: 2.0.1 Iphone Edition
When used together with: Apple » Iphone Os » Version: 2.0.1 Ipodtouch Edition
When used together with: Apple » Iphone Os » Version: 2.0.2
When used together with: Apple » Iphone Os » Version: 2.0.2 Iphone Edition
When used together with: Apple » Iphone Os » Version: 2.0.2 Ipodtouch Edition
When used together with: Apple » Iphone Os » Version: 2.1
When used together with: Apple » Iphone Os » Version: 2.1 Iphone Edition
When used together with: Apple » Iphone Os » Version: 2.1 Ipodtouch Edition
When used together with: Apple » Iphone Os » Version: 2.1.1
When used together with: Apple » Iphone Os » Version: 2.2
When used together with: Apple » Iphone Os » Version: 2.2 Iphone Edition
When used together with: Apple » Iphone Os » Version: 2.2 Ipodtouch Edition
When used together with: Apple » Iphone Os » Version: 2.2.1
When used together with: Apple » Iphone Os » Version: 2.2.1 Iphone Edition
When used together with: Apple » Iphone Os » Version: 2.2.1 Ipodtouch Edition
When used together with: Apple » Iphone Os » Version: 3.0
When used together with: Apple » Iphone Os » Version: 3.0 Ipodtouch Edition
When used together with: Apple » Iphone Os » Version: 3.0.1
When used together with: Apple » Iphone Os » Version: 3.0.1 Iphone Edition
When used together with: Apple » Iphone Os » Version: 3.1.2
When used together with: Apple » Iphone Os » Version: 3.1.2 Ipodtouch Edition
Apple » Safari » Version: 4.0.4
cpe:2.3:a:apple:safari:4.0.4:*:*:*:*:*:*:*
Matching versions
Google » Chrome » Version: 4.0.249.0
cpe:2.3:a:google:chrome:4.0.249.0:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2010-1029

EPSS FAQ

89.86%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 99 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2010-1029

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:N/A:P	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial

CWE ids for CVE-2010-1029

CWE-399

Assigned by: nvd@nist.gov (Primary)

References for CVE-2010-1029

http://www.exploit-db.com/exploits/11574

iPhone - 'WebCore::CSSSelector()' Remote Crash - Hardware dos Exploit
Exploit
http://www.vupen.com/english/advisories/2011/0212

Webmail | OVH- OVH

CVEs referencing this url
https://exchange.xforce.ibmcloud.com/vulnerabilities/56524

Apple Safari and Google Chrome STYLE denial of service CVE-2010-1029 Vulnerability Report
http://www.securityfocus.com/bid/38398

WebKit Style Tag Remote Denial of Service Vulnerability
Exploit
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html

[security-announce] SUSE Security Summary Report: SUSE-SR:2011:002

CVEs referencing this url
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14301

Repository / Oval Repository
http://www.exploit-db.com/exploits/11567

Apple Safari 4.0.4 / Google Chrome 4.0.249 - CSS style Stack Overflow Denial of Service (PoC) - Multiple dos Exploit
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/56527

WebKit CSSSelector() denial of service CVE-2010-1029 Vulnerability Report

Jump to

Vulnerability Details : CVE-2010-1029

Products affected by CVE-2010-1029

Exploit prediction scoring system (EPSS) score for CVE-2010-1029

CVSS scores for CVE-2010-1029

CWE ids for CVE-2010-1029

References for CVE-2010-1029