CVE-2010-1386
Severity Score
10.0
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
page/Geolocation.cpp in WebCore in WebKit before r56188 and before 1.2.5 does not properly restrict access to the lastPosition function, which has unspecified impact and remote attack vectors, aka rdar problem 7746357.
En el archivo page/Geolocation.cpp en WebCore en WebKit anterior a r56188 y anterior a versión 1.2.5 no restringe apropiadamente el acceso a la función lastPosition, que tiene un impacto no especificado y vectores de ataque remoto, también se conoce como rdar problem 7746357.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2010-04-15 CVE Reserved
- 2010-08-19 CVE Published
- 2023-03-07 EPSS Updated
- 2024-08-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-264: Permissions, Privileges, and Access Controls
CAPEC
References (12)
| URL | Tag | Source |
|---|---|---|
| http://security-tracker.debian.org/tracker/CVE-2010-1386 | X_refsource_confirm | |
| http://trac.webkit.org/changeset/56188 | X_refsource_confirm | |
| http://www.securityfocus.com/bid/42500 | Vdb Entry | |
| https://bugs.webkit.org/show_bug.cgi?id=36255 | X_refsource_confirm |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html | 2011-08-23 | |
| http://secunia.com/advisories/41856 | 2011-08-23 | |
| http://secunia.com/advisories/43068 | 2011-08-23 | |
| http://www.mandriva.com/security/advisories?name=MDVSA-2011:039 | 2011-08-23 | |
| http://www.ubuntu.com/usn/USN-1006-1 | 2011-08-23 | |
| http://www.vupen.com/english/advisories/2010/2722 | 2011-08-23 | |
| http://www.vupen.com/english/advisories/2011/0212 | 2011-08-23 | |
| http://www.vupen.com/english/advisories/2011/0552 | 2011-08-23 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Apple Search vendor "Apple" | Webkit Search vendor "Apple" for product "Webkit" | <= r56187 Search vendor "Apple" for product "Webkit" and version " <= r56187" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Webkit Search vendor "Apple" for product "Webkit" | r50173 Search vendor "Apple" for product "Webkit" and version "r50173" | - |
Affected
| ||||||