CVEvulnerability
CVE-2010-1386
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-08-19
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
page/Geolocation.cpp in WebCore in WebKit before r56188 and before 1.2.5 does not properly restrict access to the lastPosition function, which has unspecified impact and remote attack vectors, aka rdar problem 7746357.
Affected configurations
• apple webkit (<= r56187)
• apple webkit r50173
Related
Weakness · not in database (1)
References
- http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html lists.opensuse.org
- http://secunia.com/advisories/41856 Vendor Advisory
- http://secunia.com/advisories/43068 Vendor Advisory
- http://security-tracker.debian.org/tracker/CVE-2010-1386 security-tracker.debian.org
- http://trac.webkit.org/changeset/56188 trac.webkit.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:039 www.mandriva.com
- http://www.securityfocus.com/bid/42500 www.securityfocus.com
- http://www.ubuntu.com/usn/USN-1006-1 www.ubuntu.com
- http://www.vupen.com/english/advisories/2010/2722 Vendor Advisory
- http://www.vupen.com/english/advisories/2011/0212 Vendor Advisory
- http://www.vupen.com/english/advisories/2011/0552 Vendor Advisory
- https://bugs.webkit.org/show_bug.cgi?id=36255 bugs.webkit.org
- http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html lists.opensuse.org
- http://secunia.com/advisories/41856 Vendor Advisory
- http://secunia.com/advisories/43068 Vendor Advisory
- http://security-tracker.debian.org/tracker/CVE-2010-1386 security-tracker.debian.org
- http://trac.webkit.org/changeset/56188 trac.webkit.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:039 www.mandriva.com
- http://www.securityfocus.com/bid/42500 www.securityfocus.com
- http://www.ubuntu.com/usn/USN-1006-1 www.ubuntu.com
- http://www.vupen.com/english/advisories/2010/2722 Vendor Advisory
- http://www.vupen.com/english/advisories/2011/0212 Vendor Advisory
- http://www.vupen.com/english/advisories/2011/0552 Vendor Advisory
- https://bugs.webkit.org/show_bug.cgi?id=36255 bugs.webkit.org