CVE

Id
43991  
CVE No.
CVE-2010-1407  
Status
Candidate  
Description
WebKit in Apple iOS before 4 on the iPhone and iPod touch does not properly implement the history.replaceState method in certain situations involving IFRAME elements, which allows remote attackers to obtain sensitive information via a crafted HTML document.  
Phase
Assigned (20100415)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
479705 43991 CVE-2010-1407 CONFIRM:http://support.apple.com/kb/HT4225  View
479706 43991 CVE-2010-1407 CONFIRM:http://support.apple.com/kb/HT4456  View
479707 43991 CVE-2010-1407 APPLE:APPLE-SA-2010-06-21-1  View
479708 43991 CVE-2010-1407 URL:http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html  View
479709 43991 CVE-2010-1407 APPLE:APPLE-SA-2010-11-22-1  View
479710 43991 CVE-2010-1407 URL:http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html  View
479711 43991 CVE-2010-1407 MANDRIVA:MDVSA-2011:039  View
479712 43991 CVE-2010-1407 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2011:039  View
479713 43991 CVE-2010-1407 SUSE:SUSE-SR:2011:002  View
479714 43991 CVE-2010-1407 URL:http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html  View
479715 43991 CVE-2010-1407 UBUNTU:USN-1006-1  View
479716 43991 CVE-2010-1407 URL:http://www.ubuntu.com/usn/USN-1006-1  View
479717 43991 CVE-2010-1407 BID:41016  View
479718 43991 CVE-2010-1407 URL:http://www.securityfocus.com/bid/41016  View
479719 43991 CVE-2010-1407 SECUNIA:41856  View
479720 43991 CVE-2010-1407 URL:http://secunia.com/advisories/41856  View
479721 43991 CVE-2010-1407 SECUNIA:42314  View
479722 43991 CVE-2010-1407 URL:http://secunia.com/advisories/42314  View
479723 43991 CVE-2010-1407 SECUNIA:43068  View
479724 43991 CVE-2010-1407 URL:http://secunia.com/advisories/43068  View
479725 43991 CVE-2010-1407 VUPEN:ADV-2010-2722  View
479726 43991 CVE-2010-1407 URL:http://www.vupen.com/english/advisories/2010/2722  View
479727 43991 CVE-2010-1407 VUPEN:ADV-2011-0212  View
479728 43991 CVE-2010-1407 URL:http://www.vupen.com/english/advisories/2011/0212  View
479729 43991 CVE-2010-1407 VUPEN:ADV-2011-0552  View
479730 43991 CVE-2010-1407 URL:http://www.vupen.com/english/advisories/2011/0552  View
479731 43991 CVE-2010-1407 XF:appleios-historyreplace-info-disclosure(59629)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
35871 JVNDB-2010-001651 LibTIFF の FAX3 デコーダの Fax3SetupState 関数における整数オーバーフローの脆弱性 Apple Mac OS X の ImageIO で使用される LibTIFF の FAX3 デコーダにおける tif_fax3.c の Fax3SetupState 関数には、整数オーバーフローの脆弱性が存在します。 CVE-2010-1411 43991 6.8 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001651.html  View