NVD

Id
12948  
Name
CVE-2010-1416  
Description
WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, does not properly restrict the reading of a canvas that contains an SVG image pattern from a different web site, which allows remote attackers to read images from other sites via a crafted canvas, related to a "cross-site image capture issue."  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2010-06-11  
Modified Date
2011-03-17  
Seq
2010-1416  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
71614 12948 CVE-2010-1416 APPLE-SA-2010-06-16-1  View
71615 12948 CVE-2010-1416 APPLE-SA-2010-11-22-1  View
71616 12948 CVE-2010-1416 APPLE-SA-2010-06-07-1  View
71617 12948 CVE-2010-1416 APPLE-SA-2010-06-21-1  View
71618 12948 CVE-2010-1416 SUSE-SR:2011:002  View
71619 12948 CVE-2010-1416 oval:org.mitre.oval:def:7401  View
71620 12948 CVE-2010-1416 1024067  View
71621 12948 CVE-2010-1416 http://support.apple.com/kb/HT4196  View
71622 12948 CVE-2010-1416 http://support.apple.com/kb/HT4220  View
71623 12948 CVE-2010-1416 http://support.apple.com/kb/HT4225  View
71624 12948 CVE-2010-1416 http://support.apple.com/kb/HT4456  View
71625 12948 CVE-2010-1416 MDVSA-2011:039  View
71626 12948 CVE-2010-1416 40620  View
71627 12948 CVE-2010-1416 USN-1006-1  View
71628 12948 CVE-2010-1416 ADV-2010-1373  View
71629 12948 CVE-2010-1416 ADV-2010-1512  View
71630 12948 CVE-2010-1416 ADV-2010-2722  View
71631 12948 CVE-2010-1416 ADV-2011-0212  View
71632 12948 CVE-2010-1416 ADV-2011-0552  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35791 JVNDB-2010-001571 Apple Safari の WebKit における他のサイトから画像を読まれる脆弱性 Apple Safari の WebKit には、別の Web サイトからの SVG イメージパターンが含まれたキャンパスの読み取りを適切に制限しないため、他のサイトから画像を読まれる脆弱性が存在します。 CVE-2010-1416 43996 CVE-2010-1416 12948 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001571.html 2010-06-10 2010-12-10 View