{ "schema_version": "1.4.0", "id": "GHSA-p27p-g844-ppm9", "modified": "2022-04-23T00:14:55Z", "published": "2022-04-23T00:14:55Z", "aliases": [ "CVE-2010-1029" ], "details": "Stack consumption vulnerability in the WebCore::CSSSelector function in WebKit, as used in Apple Safari 4.0.4, Apple Safari on iPhone OS and iPhone OS for iPod touch, and Google Chrome 4.0.249, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a STYLE element composed of a large number of *> sequences.", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-1029" }, { "type": "WEB", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/56524" }, { "type": "WEB", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/56527" }, { "type": "WEB", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14301" }, { "type": "WEB", "url": "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html" }, { "type": "WEB", "url": "http://secunia.com/advisories/43068" }, { "type": "WEB", "url": "http://www.exploit-db.com/exploits/11567" }, { "type": "WEB", "url": "http://www.exploit-db.com/exploits/11574" }, { "type": "WEB", "url": "http://www.securityfocus.com/bid/38398" }, { "type": "WEB", "url": "http://www.vupen.com/english/advisories/2011/0212" } ], "database_specific": { "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2010-03-19T21:30:00Z" } }