The host is installed with Apple Safari 4.0 before 4.1 and is prone to an use-after-free vulnerability. A flaw is present in the application, which fails to handle vectors related to HTML buttons and the first-letter CSS style. Successful exploitation could allow attackers to inject arbitrary code or crash the service.