NVD

Id
15268  
Name
CVE-2010-3934  
Description
The browser in Research In Motion (RIM) BlackBerry Device Software 5.0.0.593 Platform 5.1.0.147 on the BlackBerry 9700 does not properly restrict cross-domain execution of JavaScript, which allows remote attackers to bypass the Same Origin Policy via vectors related to a window.open call and an IFRAME element. NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2010-10-14  
Modified Date
2010-10-15  
Seq
2010-3934  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
86020 15268 CVE-2010-3934 http://packetstormsecurity.org/1009-exploits/blackberry-crossorigin.txt  View
86021 15268 CVE-2010-3934 1024506  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36998 JVNDB-2010-002778 BlackBerry Device Software のブラウザにおける同一生成元ポリシーを回避される脆弱性 BlackBerry 9700 上で稼働する Research In Motion (RIM) BlackBerry Device Software のブラウザは、window.open コールおよび IFRAME 要素に関する処理に不備があり、JavaScript のクロスドメイン実行を適切に制限しないため、同一生成元ポリシーを回避される脆弱性が存在します。 CVE-2010-3934 46514 CVE-2010-3934 15268 6.8 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002778.html 2010-10-14 2011-03-31 View