Use-after-free vulnerability in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via run-in styling in an element, related to object pointers.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Use-after-free vulnerability in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2 allows remote attackers     to execute arbitrary code or cause a denial of service (application crash) via run-in styling in an     element, related to object pointers. (CVE-2010-1806)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote mobile host is a using a version of Apple iOS earlier than 4.2. Such versions are potentially affected by multiple vulnerabilities. Apple iOS 4.2 contains security fixes for the following components :

  - Configuration Policies

  - CoreGraphics

  - FreeType

  - iAd Content Display

  - ImageIO

  - libxml

  - Mail

  - Networking

  - OfficeImport

  - Photos

  - Safari

  - Telephony

  - WebKit

  - Multiple components

The remote host has Safari installed.

Versions of Safari earlier than 4.1.2 / 5.0.2 are potentially affected by several issues in the following component :

  -  Webkit

The version of Safari installed on the remote Windows host is earlier than 5.0.2.  Such versions are potentially affected by several issues in the following components :

  - Safari

  - WebKit

The version of Apple Safari installed on the remote Mac OS X host is earlier than 5.0.2 / 4.1.2.  As such, it is potentially affected by several issues in the following component :

  - WebKit

ID	Name	Product	Family	Severity
217215	Linux Distros Unpatched Vulnerability : CVE-2010-1806	Nessus	Misc.	critical
5715	Apple iOS < 4.2 Multiple Vulnerabilities	Nessus Network Monitor	Mobile Devices	critical
5655	Safari < 4.1.2 / 5.0.2 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	medium
49144	Safari < 5.0.2 Multiple Vulnerabilities	Nessus	Windows	high
49143	Mac OS X : Apple Safari < 5.0.2 / 4.1.2	Nessus	MacOS X Local Security Checks	high

Detections

Analytics

CVE-2010-1806

critical

Tenable Plugins

critical

critical

medium

high

high