Apple.Webkit.Anchor.Tag.Mouse.Click.Event.Code.Execution

Release Date Aug 31, 2010
Severity high
Impact System Compromise: Remote attackers can gain control of vulnerable systems.
Description This indicates an attack attempt to exploit a code-execution vulnerability in Apple Webkit. This issue is caused by an error when the vulnerable software handles a web page with mouse events on a particular element. It may allow remote attackers to execute arbitrary code by sending a crafted web page.
Affected Products Safari 4 (Windows) Safari 4 (Mac OS X 10.5) Safari 4 (Mac OS X 10.4) Safari 4 (Mac OS X 10.6)
Recommended Actions Refer to the vendor's web site for the suggested workaround: http://support.apple.com/kb/HT4070
Coverage IPS VCM
Common Vulnerabilities and Exposures (CVE) CVE-2010-0048
Reference/s http://www.zerodayinitiative.com/advisories/ZDI-10-146

Fortinet