CVE-2010-1812

MEDIUM 6.8CVE-2010-1812 · Published 09/09/2010 · updated 16/06/2026

In short

CVE-2010-1812 is a MEDIUM (CVSS 6.8) vulnerability affecting webkitgtk (webkitgtk).
Chance of exploitation in the next 30 days (EPSS): 4.4%, higher than 91.3% of all vulnerabilities.
Fix: update to 1.2.6 or later.

Package	Affected versions	Patched versions
webkitgtk webkitgtk	`< 1.2.6`	`1.2.6`

Description

Use-after-free vulnerability in WebKit in Apple iOS before 4.1 on the iPhone and iPod touch, and webkitgtk before 1.2.6, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving selections.

References

lists.apple.com/archives/security-announce/2010//Nov/msg00002.html · Mailing List
lists.apple.com/archives/security-announce/2010//Nov/msg00003.html · Mailing List
lists.apple.com/archives/security-announce/2010//Sep/msg00002.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html · Mailing List
secunia.com/advisories/41856 · Third Party Advisory
secunia.com/advisories/42314 · Third Party Advisory
secunia.com/advisories/43068 · Third Party Advisory
secunia.com/advisories/43086 · Third Party Advisory
support.apple.com/kb/HT4334 · Vendor Advisory
support.apple.com/kb/HT4455 · Vendor Advisory
support.apple.com/kb/HT4456 · Vendor Advisory
mandriva.com/security/advisories

More vulnerabilities in webkitgtk

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

webkitgtk

< 1.2.6

1.2.6

More vulnerabilities in webkitgtk

See all →