NVD

Id
12198  
Name
CVE-2010-0651  
Description
WebKit before r52784, as used in Google Chrome before 4.0.249.78 and Apple Safari before 4.0.5, permits cross-origin loading of CSS stylesheets even when the stylesheet download has an incorrect MIME type and the stylesheet document is malformed, which allows remote attackers to obtain sensitive information via a crafted document.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2010-02-18  
Modified Date
2012-04-17  
Seq
2010-0651  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
67158 12198 CVE-2010-0651 http://code.google.com/p/chromium/issues/detail?id=9877  View
67159 12198 CVE-2010-0651 http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html  View
67160 12198 CVE-2010-0651 SUSE-SR:2011:002  View
67161 12198 CVE-2010-0651 oval:org.mitre.oval:def:13653  View
67162 12198 CVE-2010-0651 http://scarybeastsecurity.blogspot.com/2009/12/generic-cross-browser-cross-domain.html  View
67163 12198 CVE-2010-0651 1023506  View
67164 12198 CVE-2010-0651 http://trac.webkit.org/changeset/52784  View
67165 12198 CVE-2010-0651 http://websec.sv.cmu.edu/css/css.pdf  View
67166 12198 CVE-2010-0651 MDVSA-2011:039  View
67167 12198 CVE-2010-0651 USN-1006-1  View
67168 12198 CVE-2010-0651 ADV-2010-2722  View
67169 12198 CVE-2010-0651 ADV-2011-0212  View
67170 12198 CVE-2010-0651 ADV-2011-0552  View
67171 12198 CVE-2010-0651 https://bugs.webkit.org/show_bug.cgi?id=29820  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
43013 JVNDB-2009-004020 Google Chrome および Apple Safari における重要な情報を取得される脆弱性 Google Chrome および Apple Safari で使用される WebKit は、スタイルシートダウンロードが誤った MIME タイプを保持し、スタイルシート文書が不正な形式の際、スタイルシートドキュメントがクロスオリジンの読み込みを許可するため、重要な情報を取得される脆弱性が存在します。 CVE-2010-0651 43231 CVE-2010-0651 12198 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004020.html 2009-04-08 2012-06-26 View