CVE

Id
42899  
CVE No.
CVE-2010-0315  
Status
Candidate  
Description
WebKit before r53607, as used in Google Chrome before 4.0.249.89, allows remote attackers to discover a redirect"s target URL, for the session of a specific user of a web site, by placing the site"s URL in the HREF attribute of a stylesheet LINK element, and then reading the document.styleSheets[0].href property value, related to an IFRAME element.  
Phase
Assigned (20100114)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
467965 42899 CVE-2010-0315 MISC:http://nomoreroot.blogspot.com/2010/01/little-bug-in-safari-and-google-chrome.html  View
467966 42899 CVE-2010-0315 CONFIRM:http://code.google.com/p/chromium/issues/detail?id=32309  View
467967 42899 CVE-2010-0315 CONFIRM:http://googlechromereleases.blogspot.com/2010/02/stable-channel-update.html  View
467968 42899 CVE-2010-0315 CONFIRM:http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs  View
467969 42899 CVE-2010-0315 CONFIRM:http://trac.webkit.org/changeset/53607  View
467970 42899 CVE-2010-0315 CONFIRM:https://bugs.webkit.org/show_bug.cgi?id=33683  View
467971 42899 CVE-2010-0315 SUSE:SUSE-SR:2011:002  View
467972 42899 CVE-2010-0315 URL:http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html  View
467973 42899 CVE-2010-0315 BID:38177  View
467974 42899 CVE-2010-0315 URL:http://www.securityfocus.com/bid/38177  View
467975 42899 CVE-2010-0315 OVAL:oval:org.mitre.oval:def:14452  View
467976 42899 CVE-2010-0315 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14452  View
467977 42899 CVE-2010-0315 SECTRACK:1023583  View
467978 42899 CVE-2010-0315 URL:http://securitytracker.com/id?1023583  View
467979 42899 CVE-2010-0315 SECUNIA:38545  View
467980 42899 CVE-2010-0315 URL:http://secunia.com/advisories/38545  View
467981 42899 CVE-2010-0315 SECUNIA:43068  View
467982 42899 CVE-2010-0315 URL:http://secunia.com/advisories/43068  View
467983 42899 CVE-2010-0315 VUPEN:ADV-2010-0361  View
467984 42899 CVE-2010-0315 URL:http://www.vupen.com/english/advisories/2010/0361  View
467985 42899 CVE-2010-0315 VUPEN:ADV-2011-0212  View
467986 42899 CVE-2010-0315 URL:http://www.vupen.com/english/advisories/2011/0212  View
467987 42899 CVE-2010-0315 XF:googlechrome-iframe-info-disc(56215)  View
467988 42899 CVE-2010-0315 URL:http://xforce.iss.net/xforce/xfdb/56215  View
467989 42899 CVE-2010-0315 XF:google-chrome-href-info-disclosure(55683)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
38008 JVNDB-2010-003793 Docmint の index.php におけるクロスサイトスクリプティングの脆弱性 Docmint の index.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2010-0319 42899 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003793.html  View