Vulnerability Details : CVE-2010-1176
Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors related to an array of long strings, an array of IMG elements with crafted strings in their SRC attributes, a TBODY element with no associated TABLE element, and certain calls to the delete operator and the cloneNode, clearAttributes, and CollectGarbage methods, possibly a related issue to CVE-2009-0075.
Vulnerability category: Execute codeDenial of service
Products affected by CVE-2010-1176
Exploit prediction scoring system (EPSS) score for CVE-2010-1176
1.98%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 89 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2010-1176
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
9.3
|
HIGH | AV:N/AC:M/Au:N/C:C/I:C/A:C |
8.6
|
10.0
|
NIST |
CWE ids for CVE-2010-1176
-
The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.Assigned by: nvd@nist.gov (Primary)
References for CVE-2010-1176
-
http://nishantdaspatnaik.yolasite.com/ipodpoc1.php
nishantdaspatnaik.yolasite.com | 502: Bad gatewayExploit
-
http://www.exploit-db.com/exploits/11891
Apple iOS Safari - Remote Denial of Service - iOS dos ExploitExploit
-
http://www.securityfocus.com/bid/38989
Apple iPhone/iPod Touch Safari Malformed Image Remote Code Execution VulnerabilityExploit
Jump to