製品・ソフトウェアに関する情報

JVN脆弱性詳細

Apple Safari の WebKit における任意のコードを実行される脆弱性

Title	Apple Safari の WebKit における任意のコードを実行される脆弱性
Summary	Apple Safari の WebKit には、テキストノードへの動的変更を適切に処理しないため、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。
Possible impacts	第三者により、巧妙に細工された HTML ドキュメントを介して、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	July 30, 2010, midnight
Registration Date	Aug. 20, 2010, 6:25 p.m.
Last Update	Feb. 7, 2011, 3:25 p.m.

CVSS2.0 : 危険
Score	9.3
Vector	AV:N/AC:M/Au:N/C:C/I:C/A:C

Affected System

レッドハット

Red Hat Enterprise Linux Desktop 6

Red Hat Enterprise Linux HPC Node 6

Red Hat Enterprise Linux Server 6

Red Hat Enterprise Linux Workstation 6

アップル

Apple Mac OS X v10.4.11

Apple Mac OS X v10.5.8

Apple Mac OS X v10.6.2 以降

Apple Mac OS X Server v10.4.11

Apple Mac OS X Server v10.5.8

Apple Mac OS X Server v10.6.2 以降

iOS 2.0 から 4.0.2 (iPhone 3G 以降の場合)

iOS 2.1 から 4.0.2 (iPod touch (2nd generation) 以降の場合)

iOS 3.2 から 3.2.2 (iPad 用)

iPad

iPhone

iPod touch

iTunes 10

Safari 4

Safari 5

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2010-1783	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1783
National Vulnerability Database (NVD)
2	CVE-2010-1783	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-1783

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-119	https://jvndb.jvn.jp/ja/cwe/CWE-119.html

ベンダー情報

No	Name	URL
Apple Security Updates
1	HT4276	http://support.apple.com/kb/HT4276
2	HT4328	http://support.apple.com/kb/HT4328
3	HT4334	http://support.apple.com/kb/HT4334
4	HT4456	http://support.apple.com/kb/HT4456
Apple セキュリティアップデート
5	HT4276	http://support.apple.com/kb/HT4276?viewlocale=ja_JP
6	HT4328	http://support.apple.com/kb/HT4328?viewlocale=ja_JP
7	HT4334	http://support.apple.com/kb/HT4334?viewlocale=ja_JP
Red Hat Security Advisory
8	RHSA-2011:0177	https://rhn.redhat.com/errata/RHSA-2011-0177.html

その他

No	Name	URL
JVN
1	JVNVU#407599	http://jvn.jp/cert/JVNVU407599
2	JVNVU#568637	http://jvn.jp/cert/JVNVU568637
SecurityFocus
3	42035	http://www.securityfocus.com/bid/42035

Change Log

No	Changed Details	Date of change
0	[2010年08月20日] 掲載 [2010年09月14日] 影響を受けるシステム：アップル (HT4328) の情報を追加影響を受けるシステム：アップル (HT4334) の情報を追加ベンダ情報：アップル (HT4328) を追加ベンダ情報：アップル (HT4334) を追加 [2010年12月10日] 影響を受けるシステム：アップル (HT4456) の情報を追加ベンダ情報：アップル (HT4456) を追加 [2011年02月07日] 影響を受けるシステム：レッドハット (RHSA-2011:0177) の情報を追加ベンダ情報：レッドハット (RHSA-2011:0177) を追加	Feb. 17, 2018, 10:37 a.m.

NVD Vulnerability Information

CVE-2010-1783

Summary	WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; does not properly handle dynamic modification of a text node, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document.
Publication Date	July 31, 2010, 5:30 a.m.
Registration Date	Jan. 29, 2021, 11:01 a.m.
Last Update	Nov. 21, 2024, 10:15 a.m.

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:a:apple:safari::::::::			5.0
cpe:2.3:a:apple:safari:4.0:::::::*
cpe:2.3:a:apple:safari:4.0.0b:::::::*
cpe:2.3:a:apple:safari:4.0.1:::::::*
cpe:2.3:a:apple:safari:4.0.2:::::::*
cpe:2.3:a:apple:safari:4.0.3:::::::*
cpe:2.3:a:apple:safari:4.0.4:::::::*
cpe:2.3:a:apple:safari:4.0.5:::::::*
cpe:2.3:a:apple:webkit::::::::
execution environment
1	cpe:2.3:o:apple:mac_os_x:10.5:::::::*
2	cpe:2.3:o:apple:mac_os_x:10.5.0:::::::*
3	cpe:2.3:o:apple:mac_os_x:10.5.1:::::::*
4	cpe:2.3:o:apple:mac_os_x:10.5.2:::::::*
5	cpe:2.3:o:apple:mac_os_x:10.5.3:::::::*
6	cpe:2.3:o:apple:mac_os_x:10.5.4:::::::*
7	cpe:2.3:o:apple:mac_os_x:10.5.5:::::::*
8	cpe:2.3:o:apple:mac_os_x:10.5.6:::::::*
9	cpe:2.3:o:apple:mac_os_x:10.5.7:::::::*
10	cpe:2.3:o:apple:mac_os_x:10.5.8:::::::*
11	cpe:2.3:o:apple:mac_os_x:10.6.0:::::::*
12	cpe:2.3:o:apple:mac_os_x:10.6.1:::::::*
13	cpe:2.3:o:apple:mac_os_x:10.6.2:::::::*
14	cpe:2.3:o:apple:mac_os_x:10.6.3:::::::*
15	cpe:2.3:o:apple:mac_os_x:10.6.4:::::::*
16	cpe:2.3:o:apple:mac_os_x_server:10.5:::::::*
17	cpe:2.3:o:apple:mac_os_x_server:10.5.0:::::::*
18	cpe:2.3:o:apple:mac_os_x_server:10.5.1:::::::*
19	cpe:2.3:o:apple:mac_os_x_server:10.5.2:::::::*
20	cpe:2.3:o:apple:mac_os_x_server:10.5.3:::::::*
21	cpe:2.3:o:apple:mac_os_x_server:10.5.4:::::::*
22	cpe:2.3:o:apple:mac_os_x_server:10.5.5:::::::*
23	cpe:2.3:o:apple:mac_os_x_server:10.5.6:::::::*
24	cpe:2.3:o:apple:mac_os_x_server:10.5.7:::::::*
25	cpe:2.3:o:apple:mac_os_x_server:10.5.8:::::::*
26	cpe:2.3:o:apple:mac_os_x_server:10.6.0:::::::*
27	cpe:2.3:o:apple:mac_os_x_server:10.6.1:::::::*
28	cpe:2.3:o:apple:mac_os_x_server:10.6.2:::::::*
29	cpe:2.3:o:apple:mac_os_x_server:10.6.3:::::::*
30	cpe:2.3:o:apple:mac_os_x_server:10.6.4:::::::*
31	cpe:2.3:o:microsoft:windows_7::::::::
32	cpe:2.3:o:microsoft:windows_vista::::::::
33	cpe:2.3:o:microsoft:windows_xp::sp2::::::*
34	cpe:2.3:o:microsoft:windows_xp::sp3::::::*

Configuration2		or higher	or less	more than	less than
cpe:2.3:a:apple:safari::::::::			4.1
cpe:2.3:a:apple:safari:4.0:::::::*
cpe:2.3:a:apple:safari:4.0.0b:::::::*
cpe:2.3:a:apple:safari:4.0.1:::::::*
cpe:2.3:a:apple:safari:4.0.2:::::::*
cpe:2.3:a:apple:safari:4.0.3:::::::*
cpe:2.3:a:apple:safari:4.0.4:::::::*
cpe:2.3:a:apple:safari:4.0.5:::::::*
cpe:2.3:a:apple:webkit::::::::
execution environment
1	cpe:2.3:o:apple:mac_os_x:10.4:::::::*
2	cpe:2.3:o:apple:mac_os_x:10.4.0:::::::*
3	cpe:2.3:o:apple:mac_os_x:10.4.1:::::::*
4	cpe:2.3:o:apple:mac_os_x:10.4.2:::::::*
5	cpe:2.3:o:apple:mac_os_x:10.4.3:::::::*
6	cpe:2.3:o:apple:mac_os_x:10.4.4:::::::*
7	cpe:2.3:o:apple:mac_os_x:10.4.5:::::::*
8	cpe:2.3:o:apple:mac_os_x:10.4.6:::::::*
9	cpe:2.3:o:apple:mac_os_x:10.4.7:::::::*
10	cpe:2.3:o:apple:mac_os_x:10.4.8:::::::*
11	cpe:2.3:o:apple:mac_os_x:10.4.9:::::::*
12	cpe:2.3:o:apple:mac_os_x:10.4.10:::::::*
13	cpe:2.3:o:apple:mac_os_x:10.4.11:::::::*
14	cpe:2.3:o:apple:mac_os_x_server:10.4:::::::*
15	cpe:2.3:o:apple:mac_os_x_server:10.4.0:::::::*
16	cpe:2.3:o:apple:mac_os_x_server:10.4.1:::::::*
17	cpe:2.3:o:apple:mac_os_x_server:10.4.2:::::::*
18	cpe:2.3:o:apple:mac_os_x_server:10.4.3:::::::*
19	cpe:2.3:o:apple:mac_os_x_server:10.4.4:::::::*
20	cpe:2.3:o:apple:mac_os_x_server:10.4.5:::::::*
21	cpe:2.3:o:apple:mac_os_x_server:10.4.6:::::::*
22	cpe:2.3:o:apple:mac_os_x_server:10.4.7:::::::*
23	cpe:2.3:o:apple:mac_os_x_server:10.4.8:::::::*
24	cpe:2.3:o:apple:mac_os_x_server:10.4.9:::::::*
25	cpe:2.3:o:apple:mac_os_x_server:10.4.10:::::::*
26	cpe:2.3:o:apple:mac_os_x_server:10.4.11:::::::*

Related information, measures and tools

No	URL	タグ
1	http://lists.apple.com/archives/security-announce/2010//Jul/msg00001.html	Patch Vendor Advisory
2	http://lists.apple.com/archives/security-announce/2010//Jul/msg00001.html	Patch Vendor Advisory
3	http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html
4	http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html
5	http://lists.apple.com/archives/security-announce/2010//Sep/msg00002.html
6	http://lists.apple.com/archives/security-announce/2010//Sep/msg00002.html
7	http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
8	http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
9	http://secunia.com/advisories/41856
10	http://secunia.com/advisories/41856
11	http://secunia.com/advisories/42314
12	http://secunia.com/advisories/42314
13	http://secunia.com/advisories/43068
14	http://secunia.com/advisories/43068
15	http://secunia.com/advisories/43086
16	http://secunia.com/advisories/43086
17	http://support.apple.com/kb/HT4276	Vendor Advisory
18	http://support.apple.com/kb/HT4276	Vendor Advisory
19	http://support.apple.com/kb/HT4334
20	http://support.apple.com/kb/HT4334
21	http://support.apple.com/kb/HT4456
22	http://support.apple.com/kb/HT4456
23	http://www.debian.org/security/2011/dsa-2188
24	http://www.debian.org/security/2011/dsa-2188
25	http://www.mandriva.com/security/advisories?name=MDVSA-2011:039
26	http://www.mandriva.com/security/advisories?name=MDVSA-2011:039
27	http://www.redhat.com/support/errata/RHSA-2011-0177.html
28	http://www.redhat.com/support/errata/RHSA-2011-0177.html
29	http://www.securityfocus.com/bid/42020	Patch
30	http://www.securityfocus.com/bid/42020	Patch
31	http://www.ubuntu.com/usn/USN-1006-1
32	http://www.ubuntu.com/usn/USN-1006-1
33	http://www.vupen.com/english/advisories/2010/2722
34	http://www.vupen.com/english/advisories/2010/2722
35	http://www.vupen.com/english/advisories/2011/0212
36	http://www.vupen.com/english/advisories/2011/0212
37	http://www.vupen.com/english/advisories/2011/0216
38	http://www.vupen.com/english/advisories/2011/0216
39	http://www.vupen.com/english/advisories/2011/0552
40	http://www.vupen.com/english/advisories/2011/0552
41	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11820
42	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11820

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-119	バッファエラー	https://cwe.mitre.org/data/definitions/118.html

Configuration1		or higher	or less	more than	less than
cpe:2.3:a:apple:safari::::::::			5.0
cpe:2.3:a:apple:safari:4.0:::::::*
cpe:2.3:a:apple:safari:4.0.0b:::::::*
cpe:2.3:a:apple:safari:4.0.1:::::::*
cpe:2.3:a:apple:safari:4.0.2:::::::*
cpe:2.3:a:apple:safari:4.0.3:::::::*
cpe:2.3:a:apple:safari:4.0.4:::::::*
cpe:2.3:a:apple:safari:4.0.5:::::::*
cpe:2.3:a:apple:webkit::::::::
execution environment
1	cpe:2.3:o:apple:mac_os_x:10.5:::::::*
2	cpe:2.3:o:apple:mac_os_x:10.5.0:::::::*
3	cpe:2.3:o:apple:mac_os_x:10.5.1:::::::*
4	cpe:2.3:o:apple:mac_os_x:10.5.2:::::::*
5	cpe:2.3:o:apple:mac_os_x:10.5.3:::::::*
6	cpe:2.3:o:apple:mac_os_x:10.5.4:::::::*
7	cpe:2.3:o:apple:mac_os_x:10.5.5:::::::*
8	cpe:2.3:o:apple:mac_os_x:10.5.6:::::::*
9	cpe:2.3:o:apple:mac_os_x:10.5.7:::::::*
10	cpe:2.3:o:apple:mac_os_x:10.5.8:::::::*
11	cpe:2.3:o:apple:mac_os_x:10.6.0:::::::*
12	cpe:2.3:o:apple:mac_os_x:10.6.1:::::::*
13	cpe:2.3:o:apple:mac_os_x:10.6.2:::::::*
14	cpe:2.3:o:apple:mac_os_x:10.6.3:::::::*
15	cpe:2.3:o:apple:mac_os_x:10.6.4:::::::*
16	cpe:2.3:o:apple:mac_os_x_server:10.5:::::::*
17	cpe:2.3:o:apple:mac_os_x_server:10.5.0:::::::*
18	cpe:2.3:o:apple:mac_os_x_server:10.5.1:::::::*
19	cpe:2.3:o:apple:mac_os_x_server:10.5.2:::::::*
20	cpe:2.3:o:apple:mac_os_x_server:10.5.3:::::::*
21	cpe:2.3:o:apple:mac_os_x_server:10.5.4:::::::*
22	cpe:2.3:o:apple:mac_os_x_server:10.5.5:::::::*
23	cpe:2.3:o:apple:mac_os_x_server:10.5.6:::::::*
24	cpe:2.3:o:apple:mac_os_x_server:10.5.7:::::::*
25	cpe:2.3:o:apple:mac_os_x_server:10.5.8:::::::*
26	cpe:2.3:o:apple:mac_os_x_server:10.6.0:::::::*
27	cpe:2.3:o:apple:mac_os_x_server:10.6.1:::::::*
28	cpe:2.3:o:apple:mac_os_x_server:10.6.2:::::::*
29	cpe:2.3:o:apple:mac_os_x_server:10.6.3:::::::*
30	cpe:2.3:o:apple:mac_os_x_server:10.6.4:::::::*
31	cpe:2.3:o:microsoft:windows_7::::::::
32	cpe:2.3:o:microsoft:windows_vista::::::::
33	cpe:2.3:o:microsoft:windows_xp::sp2::::::*
34	cpe:2.3:o:microsoft:windows_xp::sp3::::::*

Configuration2		or higher	or less	more than	less than
cpe:2.3:a:apple:safari::::::::			4.1
cpe:2.3:a:apple:safari:4.0:::::::*
cpe:2.3:a:apple:safari:4.0.0b:::::::*
cpe:2.3:a:apple:safari:4.0.1:::::::*
cpe:2.3:a:apple:safari:4.0.2:::::::*
cpe:2.3:a:apple:safari:4.0.3:::::::*
cpe:2.3:a:apple:safari:4.0.4:::::::*
cpe:2.3:a:apple:safari:4.0.5:::::::*
cpe:2.3:a:apple:webkit::::::::
execution environment
1	cpe:2.3:o:apple:mac_os_x:10.4:::::::*
2	cpe:2.3:o:apple:mac_os_x:10.4.0:::::::*
3	cpe:2.3:o:apple:mac_os_x:10.4.1:::::::*
4	cpe:2.3:o:apple:mac_os_x:10.4.2:::::::*
5	cpe:2.3:o:apple:mac_os_x:10.4.3:::::::*
6	cpe:2.3:o:apple:mac_os_x:10.4.4:::::::*
7	cpe:2.3:o:apple:mac_os_x:10.4.5:::::::*
8	cpe:2.3:o:apple:mac_os_x:10.4.6:::::::*
9	cpe:2.3:o:apple:mac_os_x:10.4.7:::::::*
10	cpe:2.3:o:apple:mac_os_x:10.4.8:::::::*
11	cpe:2.3:o:apple:mac_os_x:10.4.9:::::::*
12	cpe:2.3:o:apple:mac_os_x:10.4.10:::::::*
13	cpe:2.3:o:apple:mac_os_x:10.4.11:::::::*
14	cpe:2.3:o:apple:mac_os_x_server:10.4:::::::*
15	cpe:2.3:o:apple:mac_os_x_server:10.4.0:::::::*
16	cpe:2.3:o:apple:mac_os_x_server:10.4.1:::::::*
17	cpe:2.3:o:apple:mac_os_x_server:10.4.2:::::::*
18	cpe:2.3:o:apple:mac_os_x_server:10.4.3:::::::*
19	cpe:2.3:o:apple:mac_os_x_server:10.4.4:::::::*
20	cpe:2.3:o:apple:mac_os_x_server:10.4.5:::::::*
21	cpe:2.3:o:apple:mac_os_x_server:10.4.6:::::::*
22	cpe:2.3:o:apple:mac_os_x_server:10.4.7:::::::*
23	cpe:2.3:o:apple:mac_os_x_server:10.4.8:::::::*
24	cpe:2.3:o:apple:mac_os_x_server:10.4.9:::::::*
25	cpe:2.3:o:apple:mac_os_x_server:10.4.10:::::::*
26	cpe:2.3:o:apple:mac_os_x_server:10.4.11:::::::*