Check Point Advisories

Apple Safari Parent.Close User After Free - Ver2 (CVE-2010-1939)

Check Point Reference:	CPAI-2014-0819
Date Published:	3 Feb 2014
Severity:	Critical
Last Updated:	Wednesday 01 January, 2014
Source:	CVE-2010-1939
Protection Provided by:
Who is Vulnerable?
Vulnerability Description	A use-after-free vulnerability has been reported in Apple Safari. The vulnerability is due to an error in Apple Safari while handling the termination and subsequent referencing between child and parent windows. A remote attacker could trigger this vulnerability by enticing a vulnerable target to access a specially crafted HTML document. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system.