CVE

Id
43990  
CVE No.
CVE-2010-1406  
Status
Candidate  
Description
WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, sends an https URL in the Referer header of an http request in certain circumstances involving https to http redirection, which allows remote HTTP servers to obtain potentially sensitive information via standard HTTP logging, a related issue to CVE-2010-0660.  
Phase
Assigned (20100415)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
479674 43990 CVE-2010-1406 CONFIRM:http://support.apple.com/kb/HT4196  View
479675 43990 CVE-2010-1406 CONFIRM:http://support.apple.com/kb/HT4225  View
479676 43990 CVE-2010-1406 APPLE:APPLE-SA-2010-06-07-1  View
479677 43990 CVE-2010-1406 URL:http://lists.apple.com/archives/security-announce/2010/Jun/msg00000.html  View
479678 43990 CVE-2010-1406 APPLE:APPLE-SA-2010-06-21-1  View
479679 43990 CVE-2010-1406 URL:http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html  View
479680 43990 CVE-2010-1406 MANDRIVA:MDVSA-2011:039  View
479681 43990 CVE-2010-1406 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2011:039  View
479682 43990 CVE-2010-1406 SUSE:SUSE-SR:2011:002  View
479683 43990 CVE-2010-1406 URL:http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html  View
479684 43990 CVE-2010-1406 UBUNTU:USN-1006-1  View
479685 43990 CVE-2010-1406 URL:http://www.ubuntu.com/usn/USN-1006-1  View
479686 43990 CVE-2010-1406 BID:40620  View
479687 43990 CVE-2010-1406 URL:http://www.securityfocus.com/bid/40620  View
479688 43990 CVE-2010-1406 OVAL:oval:org.mitre.oval:def:7197  View
479689 43990 CVE-2010-1406 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:7197  View
479690 43990 CVE-2010-1406 SECTRACK:1024067  View
479691 43990 CVE-2010-1406 URL:http://securitytracker.com/id?1024067  View
479692 43990 CVE-2010-1406 SECUNIA:40105  View
479693 43990 CVE-2010-1406 URL:http://secunia.com/advisories/40105  View
479694 43990 CVE-2010-1406 SECUNIA:41856  View
479695 43990 CVE-2010-1406 URL:http://secunia.com/advisories/41856  View
479696 43990 CVE-2010-1406 SECUNIA:43068  View
479697 43990 CVE-2010-1406 URL:http://secunia.com/advisories/43068  View
479698 43990 CVE-2010-1406 VUPEN:ADV-2010-1373  View
479699 43990 CVE-2010-1406 URL:http://www.vupen.com/english/advisories/2010/1373  View
479700 43990 CVE-2010-1406 VUPEN:ADV-2010-2722  View
479701 43990 CVE-2010-1406 URL:http://www.vupen.com/english/advisories/2010/2722  View
479702 43990 CVE-2010-1406 VUPEN:ADV-2011-0212  View
479703 43990 CVE-2010-1406 URL:http://www.vupen.com/english/advisories/2011/0212  View
479704 43990 CVE-2010-1406 VUPEN:ADV-2011-0552  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
35781 JVNDB-2010-001561 Apple Safari の WebKit における任意のコードを実行される脆弱性 Apple Safari の WebKit には、SVG ドキュメント内に入れ子にされた "use" 要素の処理に不備があるため、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2010-1410 43990 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001561.html  View