NVD

Id
15154  
Name
CVE-2010-3813  
Description
The WebCore::HTMLLinkElement::process function in WebCore/html/HTMLLinkElement.cpp in WebKit, as used in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4; webkitgtk before 1.2.6; and possibly other products does not verify whether DNS prefetching is enabled when processing an HTML LINK element, which allows remote attackers to bypass intended access restrictions, as demonstrated by an HTML e-mail message that uses a LINK element for X-Confirm-Reading-To functionality.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-18  
Published
2010-11-22  
Modified Date
2011-07-18  
Seq
2010-3813  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
85015 15154 CVE-2010-3813 APPLE-SA-2010-11-18-1  View
85016 15154 CVE-2010-3813 APPLE-SA-2010-11-22-1  View
85017 15154 CVE-2010-3813 FEDORA-2011-0121  View
85018 15154 CVE-2010-3813 SUSE-SR:2011:002  View
85019 15154 CVE-2010-3813 oval:org.mitre.oval:def:12293  View
85020 15154 CVE-2010-3813 http://support.apple.com/kb/HT4455  View
85021 15154 CVE-2010-3813 http://support.apple.com/kb/HT4456  View
85022 15154 CVE-2010-3813 http://trac.webkit.org/changeset/63622  View
85023 15154 CVE-2010-3813 MDVSA-2011:039  View
85024 15154 CVE-2010-3813 RHSA-2011:0177  View
85025 15154 CVE-2010-3813 ADV-2010-3046  View
85026 15154 CVE-2010-3813 ADV-2011-0212  View
85027 15154 CVE-2010-3813 ADV-2011-0216  View
85028 15154 CVE-2010-3813 ADV-2011-0552  View
85029 15154 CVE-2010-3813 https://bugs.webkit.org/show_bug.cgi?id=42500  View
85030 15154 CVE-2010-3813 https://bugzilla.redhat.com/show_bug.cgi?id=667024  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36724 JVNDB-2010-002504 Apple Safari の WebKit における DNS 先読み設定を回避される脆弱性 Apple Mac OS X および Windows 上で稼働している Apple Safari の WebKit には、HTML LINK 要素に関する処理に不備があるため、DNS 先読み設定を回避される脆弱性が存在します。 CVE-2010-3813 46393 CVE-2010-3813 15154 5.8 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002504.html 2010-11-22 2011-02-04 View