CVE

Id
43997  
CVE No.
CVE-2010-1413  
Status
Candidate  
Description
WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, sends NTLM credentials in cleartext in unspecified circumstances, which allows man-in-the-middle attackers to obtain sensitive information via unspecified vectors.  
Phase
Assigned (20100415)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
479953 43997 CVE-2010-1413 CONFIRM:http://support.apple.com/kb/HT4196  View
479954 43997 CVE-2010-1413 CONFIRM:http://support.apple.com/kb/HT4225  View
479955 43997 CVE-2010-1413 APPLE:APPLE-SA-2010-06-07-1  View
479956 43997 CVE-2010-1413 URL:http://lists.apple.com/archives/security-announce/2010/Jun/msg00000.html  View
479957 43997 CVE-2010-1413 APPLE:APPLE-SA-2010-06-21-1  View
479958 43997 CVE-2010-1413 URL:http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html  View
479959 43997 CVE-2010-1413 SUSE:SUSE-SR:2011:002  View
479960 43997 CVE-2010-1413 URL:http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html  View
479961 43997 CVE-2010-1413 BID:40620  View
479962 43997 CVE-2010-1413 URL:http://www.securityfocus.com/bid/40620  View
479963 43997 CVE-2010-1413 BID:40733  View
479964 43997 CVE-2010-1413 URL:http://www.securityfocus.com/bid/40733  View
479965 43997 CVE-2010-1413 OVAL:oval:org.mitre.oval:def:7255  View
479966 43997 CVE-2010-1413 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:7255  View
479967 43997 CVE-2010-1413 SECTRACK:1024067  View
479968 43997 CVE-2010-1413 URL:http://securitytracker.com/id?1024067  View
479969 43997 CVE-2010-1413 SECUNIA:40105  View
479970 43997 CVE-2010-1413 URL:http://secunia.com/advisories/40105  View
479971 43997 CVE-2010-1413 SECUNIA:43068  View
479972 43997 CVE-2010-1413 URL:http://secunia.com/advisories/43068  View
479973 43997 CVE-2010-1413 VUPEN:ADV-2010-1373  View
479974 43997 CVE-2010-1413 URL:http://www.vupen.com/english/advisories/2010/1373  View
479975 43997 CVE-2010-1413 VUPEN:ADV-2011-0212  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
35792 JVNDB-2010-001572 Apple Safari の WebKit の Cascading Style Sheets 実装における任意のコードを実行される脆弱性 Apple Safari の WebKit の Cascading Style Sheet 実装 には、疑似セレクタの後ろに複数の ":" を含む HTML コンテンツに関しての処理に不備があるため、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2010-1417 43997 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001572.html  View