WebKit SVG Tags 'animVal' Property Use-After-Free Remote Code Execution Vulnerability

WebKit is prone to a remote code-execution vulnerability.

Attackers can exploit this issue by enticing an unsuspecting user to visit a malicious webpage.

Successful exploits will allow attackers to execute arbitrary code within the context of the application. Failed exploit attempts will result in a denial-of-service condition.

NOTE: This issue was previously discussed in 48808 (Apple Safari Prior to 5.1 and 5.0.6 Multiple Security Vulnerabilities) but has been given its own record to better document it.


 

Privacy Statement
Copyright 2010, SecurityFocus