CVE
- Id
- 43992
- CVE No.
- CVE-2010-1408
- Status
- Candidate
- Description
- WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to bypass intended restrictions on outbound connections to "non-default TCP ports" via a crafted port number, related to an "integer truncation issue." NOTE: this may overlap CVE-2010-1099.
- Phase
- Assigned (20100415)
- Votes
- None (candidate not yet proposed)
- Comments
Related CVE References
| Id | CVE Id | CVE No. | Reference | Actions |
|---|---|---|---|---|
| 479732 | 43992 | CVE-2010-1408 | CONFIRM:http://support.apple.com/kb/HT4196 | View |
| 479733 | 43992 | CVE-2010-1408 | CONFIRM:http://support.apple.com/kb/HT4220 | View |
| 479734 | 43992 | CVE-2010-1408 | CONFIRM:http://support.apple.com/kb/HT4225 | View |
| 479735 | 43992 | CVE-2010-1408 | CONFIRM:http://support.apple.com/kb/HT4456 | View |
| 479736 | 43992 | CVE-2010-1408 | APPLE:APPLE-SA-2010-06-07-1 | View |
| 479737 | 43992 | CVE-2010-1408 | URL:http://lists.apple.com/archives/security-announce/2010/Jun/msg00000.html | View |
| 479738 | 43992 | CVE-2010-1408 | APPLE:APPLE-SA-2010-06-16-1 | View |
| 479739 | 43992 | CVE-2010-1408 | URL:http://lists.apple.com/archives/security-announce/2010//Jun/msg00002.html | View |
| 479740 | 43992 | CVE-2010-1408 | APPLE:APPLE-SA-2010-06-21-1 | View |
| 479741 | 43992 | CVE-2010-1408 | URL:http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html | View |
| 479742 | 43992 | CVE-2010-1408 | APPLE:APPLE-SA-2010-11-22-1 | View |
| 479743 | 43992 | CVE-2010-1408 | URL:http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html | View |
| 479744 | 43992 | CVE-2010-1408 | MANDRIVA:MDVSA-2011:039 | View |
| 479745 | 43992 | CVE-2010-1408 | URL:http://www.mandriva.com/security/advisories?name=MDVSA-2011:039 | View |
| 479746 | 43992 | CVE-2010-1408 | SUSE:SUSE-SR:2011:002 | View |
| 479747 | 43992 | CVE-2010-1408 | URL:http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html | View |
| 479748 | 43992 | CVE-2010-1408 | UBUNTU:USN-1006-1 | View |
| 479749 | 43992 | CVE-2010-1408 | URL:http://www.ubuntu.com/usn/USN-1006-1 | View |
| 479750 | 43992 | CVE-2010-1408 | BID:40620 | View |
| 479751 | 43992 | CVE-2010-1408 | URL:http://www.securityfocus.com/bid/40620 | View |
| 479752 | 43992 | CVE-2010-1408 | BID:40697 | View |
| 479753 | 43992 | CVE-2010-1408 | URL:http://www.securityfocus.com/bid/40697 | View |
| 479754 | 43992 | CVE-2010-1408 | OVAL:oval:org.mitre.oval:def:7295 | View |
| 479755 | 43992 | CVE-2010-1408 | URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:7295 | View |
| 479756 | 43992 | CVE-2010-1408 | SECTRACK:1024067 | View |
| 479757 | 43992 | CVE-2010-1408 | URL:http://securitytracker.com/id?1024067 | View |
| 479758 | 43992 | CVE-2010-1408 | SECUNIA:40105 | View |
| 479759 | 43992 | CVE-2010-1408 | URL:http://secunia.com/advisories/40105 | View |
| 479760 | 43992 | CVE-2010-1408 | SECUNIA:40196 | View |
| 479761 | 43992 | CVE-2010-1408 | URL:http://secunia.com/advisories/40196 | View |
| 479762 | 43992 | CVE-2010-1408 | SECUNIA:41856 | View |
| 479763 | 43992 | CVE-2010-1408 | URL:http://secunia.com/advisories/41856 | View |
| 479764 | 43992 | CVE-2010-1408 | SECUNIA:42314 | View |
| 479765 | 43992 | CVE-2010-1408 | URL:http://secunia.com/advisories/42314 | View |
| 479766 | 43992 | CVE-2010-1408 | SECUNIA:43068 | View |
| 479767 | 43992 | CVE-2010-1408 | URL:http://secunia.com/advisories/43068 | View |
| 479768 | 43992 | CVE-2010-1408 | VUPEN:ADV-2010-1373 | View |
| 479769 | 43992 | CVE-2010-1408 | URL:http://www.vupen.com/english/advisories/2010/1373 | View |
| 479770 | 43992 | CVE-2010-1408 | VUPEN:ADV-2010-1512 | View |
| 479771 | 43992 | CVE-2010-1408 | URL:http://www.vupen.com/english/advisories/2010/1512 | View |
| 479772 | 43992 | CVE-2010-1408 | VUPEN:ADV-2010-2722 | View |
| 479773 | 43992 | CVE-2010-1408 | URL:http://www.vupen.com/english/advisories/2010/2722 | View |
| 479774 | 43992 | CVE-2010-1408 | VUPEN:ADV-2011-0212 | View |
| 479775 | 43992 | CVE-2010-1408 | URL:http://www.vupen.com/english/advisories/2011/0212 | View |
| 479776 | 43992 | CVE-2010-1408 | VUPEN:ADV-2011-0552 | View |
Related JVN
| Id | JVN No. | Title | Summary | CVE No. | CVE Id | CVSS_v2 | CVSS_v3 | JVN URL | Actions |
|---|---|---|---|---|---|---|---|---|---|
| 35787 | JVNDB-2010-001567 | Apple Safari の WebKit における任意のコードを実行される脆弱性 | Apple Safari の WebKit には、hover イベントに関する処理に不備があるため、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。 | CVE-2010-1412 | 43992 | 9.3 | http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001567.html | View |