Read the docs
TI-2010-01695 Aliases CVE-2010-1770GHSA-r7q2-qf8r-5h57

WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, Apple Safari…

Priority MEDIUM 48CWE-94Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Code execution
Confidentiality · integrity · availability
Complete · Complete · Complete
Fix status
Will not fix Red Hat: no fix planned

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-94.

Summary

WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, Apple Safari before 4.1 on Mac OS X 10.4, and Google Chrome before 5.0.375.70 does not properly handle a transformation of a text node that has the IBM1147 character set, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document containing a BR element, related to a "type checking issue."

Why it matters now

EPSS 0.04756 91st percentileScored 2026-11-07
Fix Will not fix Red Hat: no fix planned

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 71

CPEVersionsRoleVendor
cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*up to 4.0.5VulnerableApple
cpe:2.3:a:apple:webkit:*:*:*:*:*:*:*:*all versionsVulnerableApple
cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*10.5Running onApple
cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*10.5.0Running onApple
cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*10.5.1Running onApple
cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*10.5.2Running onApple
cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*10.5.3Running onApple
cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*10.5.4Running onApple
cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*10.5.5Running onApple
cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*10.5.6Running onApple
  • cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:* Versions up to 4.0.5 Vulnerable ·Apple
  • cpe:2.3:a:apple:webkit:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Apple
  • cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:* Versions 10.5 Running on ·Apple
  • cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:* Versions 10.5.0 Running on ·Apple
  • cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:* Versions 10.5.1 Running on ·Apple
  • cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:* Versions 10.5.2 Running on ·Apple
  • cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:* Versions 10.5.3 Running on ·Apple
  • cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:* Versions 10.5.4 Running on ·Apple
  • cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:* Versions 10.5.5 Running on ·Apple
  • cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:* Versions 10.5.6 Running on ·Apple
Show 61 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*10.5.7Running onApple
cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*10.5.8Running onApple
cpe:2.3:o:apple:mac_os_x:10.6.0:*:*:*:*:*:*:*10.6.0Running onApple
cpe:2.3:o:apple:mac_os_x:10.6.1:*:*:*:*:*:*:*10.6.1Running onApple
cpe:2.3:o:apple:mac_os_x:10.6.2:*:*:*:*:*:*:*10.6.2Running onApple
cpe:2.3:o:apple:mac_os_x:10.6.3:*:*:*:*:*:*:*10.6.3Running onApple
cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*10.5Running onApple
cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*10.5.0Running onApple
cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*10.5.1Running onApple
cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*10.5.2Running onApple
cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*10.5.3Running onApple
cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*10.5.4Running onApple
cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*10.5.5Running onApple
cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*10.5.6Running onApple
cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*10.5.7Running onApple
cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*10.5.8Running onApple
cpe:2.3:o:apple:mac_os_x_server:10.6.0:*:*:*:*:*:*:*10.6.0Running onApple
cpe:2.3:o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*10.6.1Running onApple
cpe:2.3:o:apple:mac_os_x_server:10.6.2:*:*:*:*:*:*:*10.6.2Running onApple
cpe:2.3:o:apple:mac_os_x_server:10.6.3:*:*:*:*:*:*:*10.6.3Running onApple
cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*all versionsRunning onMicrosoft
cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*all versionsRunning onMicrosoft
cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*all versionsRunning onMicrosoft
cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*all versionsRunning onMicrosoft
cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*10.4Running onApple
cpe:2.3:o:apple:mac_os_x:10.4.0:*:*:*:*:*:*:*10.4.0Running onApple
cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*10.4.1Running onApple
cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*10.4.2Running onApple
cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*10.4.3Running onApple
cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*10.4.4Running onApple
cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*10.4.5Running onApple
cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*10.4.6Running onApple
cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*10.4.7Running onApple
cpe:2.3:o:apple:mac_os_x:10.4.8:*:*:*:*:*:*:*10.4.8Running onApple
cpe:2.3:o:apple:mac_os_x:10.4.9:*:*:*:*:*:*:*10.4.9Running onApple
cpe:2.3:o:apple:mac_os_x:10.4.10:*:*:*:*:*:*:*10.4.10Running onApple
cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*10.4.11Running onApple
cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*10.4Running onApple
cpe:2.3:o:apple:mac_os_x_server:10.4.0:*:*:*:*:*:*:*10.4.0Running onApple
cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*10.4.1Running onApple
cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*10.4.2Running onApple
cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*10.4.3Running onApple
cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*10.4.4Running onApple
cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*10.4.5Running onApple
cpe:2.3:o:apple:mac_os_x_server:10.4.6:*:*:*:*:*:*:*10.4.6Running onApple
cpe:2.3:o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*10.4.7Running onApple
cpe:2.3:o:apple:mac_os_x_server:10.4.8:*:*:*:*:*:*:*10.4.8Running onApple
cpe:2.3:o:apple:mac_os_x_server:10.4.9:*:*:*:*:*:*:*10.4.9Running onApple
cpe:2.3:o:apple:mac_os_x_server:10.4.10:*:*:*:*:*:*:*10.4.10Running onApple
cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*10.4.11Running onApple
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*before 5.0.375.70VulnerableGoogle
cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*9.10VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:*10.04VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:10.04.4:*:*:*:lts:*:*:*10.04.4VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:10.10:*:*:*:*:*:*:*10.10VulnerableCanonical
cpe:2.3:o:opensuse:opensuse:11.2:*:*:*:*:*:*:*11.2VulnerableopenSUSE
cpe:2.3:o:opensuse:opensuse:11.3:*:*:*:*:*:*:*11.3VulnerableopenSUSE
cpe:2.3:o:suse:suse_linux_enterprise_desktop:10:sp3:*:*:*:*:*:*10 sp3VulnerableSUSE
cpe:2.3:o:suse:suse_linux_enterprise_desktop:11:sp1:*:*:*:*:*:*11 sp1VulnerableSUSE
cpe:2.3:o:suse:suse_linux_enterprise_server:10:sp3:*:*:*:*:*:*10 sp3VulnerableSUSE
cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp1:*:*:*:*:*:*11 sp1VulnerableSUSE
  • cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:* Versions 10.5.7 Running on ·Apple
  • cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:* Versions 10.5.8 Running on ·Apple
  • cpe:2.3:o:apple:mac_os_x:10.6.0:*:*:*:*:*:*:* Versions 10.6.0 Running on ·Apple
  • cpe:2.3:o:apple:mac_os_x:10.6.1:*:*:*:*:*:*:* Versions 10.6.1 Running on ·Apple
  • cpe:2.3:o:apple:mac_os_x:10.6.2:*:*:*:*:*:*:* Versions 10.6.2 Running on ·Apple
  • cpe:2.3:o:apple:mac_os_x:10.6.3:*:*:*:*:*:*:* Versions 10.6.3 Running on ·Apple
  • cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:* Versions 10.5 Running on ·Apple
  • cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:* Versions 10.5.0 Running on ·Apple
  • cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:* Versions 10.5.1 Running on ·Apple
  • cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:* Versions 10.5.2 Running on ·Apple
  • cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:* Versions 10.5.3 Running on ·Apple
  • cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:* Versions 10.5.4 Running on ·Apple
  • cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:* Versions 10.5.5 Running on ·Apple
  • cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:* Versions 10.5.6 Running on ·Apple
  • cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:* Versions 10.5.7 Running on ·Apple
  • cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:* Versions 10.5.8 Running on ·Apple
  • cpe:2.3:o:apple:mac_os_x_server:10.6.0:*:*:*:*:*:*:* Versions 10.6.0 Running on ·Apple
  • cpe:2.3:o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:* Versions 10.6.1 Running on ·Apple
  • cpe:2.3:o:apple:mac_os_x_server:10.6.2:*:*:*:*:*:*:* Versions 10.6.2 Running on ·Apple
  • cpe:2.3:o:apple:mac_os_x_server:10.6.3:*:*:*:*:*:*:* Versions 10.6.3 Running on ·Apple
  • cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:* Versions all versions Running on ·Microsoft
  • cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:* Versions all versions Running on ·Microsoft
  • cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:* Versions all versions Running on ·Microsoft
  • cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:* Versions all versions Running on ·Microsoft
  • cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:* Versions 10.4 Running on ·Apple
  • cpe:2.3:o:apple:mac_os_x:10.4.0:*:*:*:*:*:*:* Versions 10.4.0 Running on ·Apple
  • cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:* Versions 10.4.1 Running on ·Apple
  • cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:* Versions 10.4.2 Running on ·Apple
  • cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:* Versions 10.4.3 Running on ·Apple
  • cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:* Versions 10.4.4 Running on ·Apple
  • cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:* Versions 10.4.5 Running on ·Apple
  • cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:* Versions 10.4.6 Running on ·Apple
  • cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:* Versions 10.4.7 Running on ·Apple
  • cpe:2.3:o:apple:mac_os_x:10.4.8:*:*:*:*:*:*:* Versions 10.4.8 Running on ·Apple
  • cpe:2.3:o:apple:mac_os_x:10.4.9:*:*:*:*:*:*:* Versions 10.4.9 Running on ·Apple
  • cpe:2.3:o:apple:mac_os_x:10.4.10:*:*:*:*:*:*:* Versions 10.4.10 Running on ·Apple
  • cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:* Versions 10.4.11 Running on ·Apple
  • cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:* Versions 10.4 Running on ·Apple
  • cpe:2.3:o:apple:mac_os_x_server:10.4.0:*:*:*:*:*:*:* Versions 10.4.0 Running on ·Apple
  • cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:* Versions 10.4.1 Running on ·Apple
  • cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:* Versions 10.4.2 Running on ·Apple
  • cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:* Versions 10.4.3 Running on ·Apple
  • cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:* Versions 10.4.4 Running on ·Apple
  • cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:* Versions 10.4.5 Running on ·Apple
  • cpe:2.3:o:apple:mac_os_x_server:10.4.6:*:*:*:*:*:*:* Versions 10.4.6 Running on ·Apple
  • cpe:2.3:o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:* Versions 10.4.7 Running on ·Apple
  • cpe:2.3:o:apple:mac_os_x_server:10.4.8:*:*:*:*:*:*:* Versions 10.4.8 Running on ·Apple
  • cpe:2.3:o:apple:mac_os_x_server:10.4.9:*:*:*:*:*:*:* Versions 10.4.9 Running on ·Apple
  • cpe:2.3:o:apple:mac_os_x_server:10.4.10:*:*:*:*:*:*:* Versions 10.4.10 Running on ·Apple
  • cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:* Versions 10.4.11 Running on ·Apple
  • cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* Versions before 5.0.375.70 Vulnerable ·Google
  • cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:* Versions 9.10 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:* Versions 10.04 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:10.04.4:*:*:*:lts:*:*:* Versions 10.04.4 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:10.10:*:*:*:*:*:*:* Versions 10.10 Vulnerable ·Canonical
  • cpe:2.3:o:opensuse:opensuse:11.2:*:*:*:*:*:*:* Versions 11.2 Vulnerable ·openSUSE
  • cpe:2.3:o:opensuse:opensuse:11.3:*:*:*:*:*:*:* Versions 11.3 Vulnerable ·openSUSE
  • cpe:2.3:o:suse:suse_linux_enterprise_desktop:10:sp3:*:*:*:*:*:* Versions 10 sp3 Vulnerable ·SUSE
  • cpe:2.3:o:suse:suse_linux_enterprise_desktop:11:sp1:*:*:*:*:*:* Versions 11 sp1 Vulnerable ·SUSE
  • cpe:2.3:o:suse:suse_linux_enterprise_server:10:sp3:*:*:*:*:*:* Versions 10 sp3 Vulnerable ·SUSE
  • cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp1:*:*:*:*:*:* Versions 11 sp1 Vulnerable ·SUSE

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat rating: Critical. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 6AffectedNo fix planned: Will not fix

Timeline

  1. 2026-10-02 Threatist record created from CVE-2010-1770
  2. 2026-10-03 Alias added: GHSA-r7q2-qf8r-5h57

References

Patch 1

Advisory 19

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences