CVE

Id
45843  
CVE No.
CVE-2010-3259  
Status
Candidate  
Description
WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 6.0.472.53, and webkitgtk before 1.2.6, does not properly restrict read access to images derived from CANVAS elements, which allows remote attackers to bypass the Same Origin Policy and obtain potentially sensitive image data via a crafted web site.  
Phase
Assigned (20100907)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
498882 45843 CVE-2010-3259 MISC:https://technet.microsoft.com/library/security/msvr11-002  View
498883 45843 CVE-2010-3259 CONFIRM:http://code.google.com/p/chromium/issues/detail?id=53001  View
498884 45843 CVE-2010-3259 CONFIRM:http://googlechromereleases.blogspot.com/2010/09/stable-and-beta-channel-updates.html  View
498885 45843 CVE-2010-3259 CONFIRM:http://support.apple.com/kb/HT4455  View
498886 45843 CVE-2010-3259 CONFIRM:http://support.apple.com/kb/HT4456  View
498887 45843 CVE-2010-3259 APPLE:APPLE-SA-2010-11-18-1  View
498888 45843 CVE-2010-3259 URL:http://lists.apple.com/archives/security-announce/2010//Nov/msg00002.html  View
498889 45843 CVE-2010-3259 APPLE:APPLE-SA-2010-11-22-1  View
498890 45843 CVE-2010-3259 URL:http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html  View
498891 45843 CVE-2010-3259 MANDRIVA:MDVSA-2011:039  View
498892 45843 CVE-2010-3259 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2011:039  View
498893 45843 CVE-2010-3259 REDHAT:RHSA-2011:0177  View
498894 45843 CVE-2010-3259 URL:http://www.redhat.com/support/errata/RHSA-2011-0177.html  View
498895 45843 CVE-2010-3259 SUSE:SUSE-SR:2011:002  View
498896 45843 CVE-2010-3259 URL:http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html  View
498897 45843 CVE-2010-3259 UBUNTU:USN-1006-1  View
498898 45843 CVE-2010-3259 URL:http://www.ubuntu.com/usn/USN-1006-1  View
498899 45843 CVE-2010-3259 BID:44206  View
498900 45843 CVE-2010-3259 URL:http://www.securityfocus.com/bid/44206  View
498901 45843 CVE-2010-3259 OVAL:oval:org.mitre.oval:def:11221  View
498902 45843 CVE-2010-3259 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11221  View
498903 45843 CVE-2010-3259 SECUNIA:41856  View
498904 45843 CVE-2010-3259 URL:http://secunia.com/advisories/41856  View
498905 45843 CVE-2010-3259 SECUNIA:42314  View
498906 45843 CVE-2010-3259 URL:http://secunia.com/advisories/42314  View
498907 45843 CVE-2010-3259 SECUNIA:43068  View
498908 45843 CVE-2010-3259 URL:http://secunia.com/advisories/43068  View
498909 45843 CVE-2010-3259 SECUNIA:43086  View
498910 45843 CVE-2010-3259 URL:http://secunia.com/advisories/43086  View
498911 45843 CVE-2010-3259 VUPEN:ADV-2010-2722  View
498912 45843 CVE-2010-3259 URL:http://www.vupen.com/english/advisories/2010/2722  View
498913 45843 CVE-2010-3259 VUPEN:ADV-2010-3046  View
498914 45843 CVE-2010-3259 URL:http://www.vupen.com/english/advisories/2010/3046  View
498915 45843 CVE-2010-3259 VUPEN:ADV-2011-0212  View
498916 45843 CVE-2010-3259 URL:http://www.vupen.com/english/advisories/2011/0212  View
498917 45843 CVE-2010-3259 VUPEN:ADV-2011-0216  View
498918 45843 CVE-2010-3259 URL:http://www.vupen.com/english/advisories/2011/0216  View
498919 45843 CVE-2010-3259 VUPEN:ADV-2011-0552  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
37252 JVNDB-2010-003037 phpMyAdmin の setup/frames/index.inc.php におけるクロスサイトスクリプティングの脆弱性 phpMyAdmin のセットアップスクリプトのsetup/frames/index.inc.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2010-3263 45843 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003037.html  View