.:[ packet storm ]:.
                         
security in numbers
security in numbers

 ///  File Name:ZDI-10-031.txt
Description:
Zero Day Initiative Advisory 10-031 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable software utilizing Apple's WebKit library. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists due to a failure to unregister a callback pointer during the destruction of a particular type of element when embedded inside a 'blink' container. The application dereferences the original resource which can can be leveraged by an attacker to execute arbitrary code under the context of the current user.
Author:TippingPoint
Homepage:http://www.zerodayinitiative.com/
File Size:2910
Last Modified:Mar 16 19:40:43 2010
MD5 Checksum:43ec94b162ba7d2b0766fafde3e3e294

 .:. Back