NVD

Id
12923  
Name
CVE-2010-1391  
Description
Multiple directory traversal vulnerabilities in the (a) Local Storage and (b) Web SQL database implementations in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allow remote attackers to create arbitrary database files via vectors involving a (1) %2f and .. (dot dot) or (2) %5c and .. (dot dot) in a URL.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2010-06-11  
Modified Date
2011-03-17  
Seq
2010-1391  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
71172 12923 CVE-2010-1391 APPLE-SA-2010-06-07-1  View
71173 12923 CVE-2010-1391 APPLE-SA-2010-06-21-1  View
71174 12923 CVE-2010-1391 SUSE-SR:2011:002  View
71175 12923 CVE-2010-1391 oval:org.mitre.oval:def:7082  View
71176 12923 CVE-2010-1391 1024067  View
71177 12923 CVE-2010-1391 http://support.apple.com/kb/HT4196  View
71178 12923 CVE-2010-1391 http://support.apple.com/kb/HT4225  View
71179 12923 CVE-2010-1391 MDVSA-2011:039  View
71180 12923 CVE-2010-1391 40620  View
71181 12923 CVE-2010-1391 40753  View
71182 12923 CVE-2010-1391 USN-1006-1  View
71183 12923 CVE-2010-1391 ADV-2010-1373  View
71184 12923 CVE-2010-1391 ADV-2010-2722  View
71185 12923 CVE-2010-1391 ADV-2011-0212  View
71186 12923 CVE-2010-1391 ADV-2011-0552  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35764 JVNDB-2010-001544 Apple Safari の WebKit におけるディレクトリトラバーサルの脆弱性 Apple Safari の WebKit 内にあるローカルストレージおよび Web SQL データベースの実装には、URL に %2f または %5c あるいは .. (dot dot) が含まれる際の処理に不備があるため、任意のデータベースファイルを作成される脆弱性が存在します。 CVE-2010-1391 43971 CVE-2010-1391 12923 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001544.html 2010-06-10 2010-07-13 View