CVE-2010-1389

 

Published at: - 11-06-2010 08:00

Last modified: - 14-11-2022 06:02

Total changes: - 2

Description

Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows user-assisted remote attackers to inject arbitrary web script or HTML via vectors involving a (1) paste or (2) drag-and-drop operation for a selection.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:M/Au:N/C:N/I:P/A:N

 

Verification logic

 

Reference

• APPLE-SA-2010-06-07-1-Patch, Vendor Advisory
• 40620-Patch
• ADV-2010-1373-Patch, Vendor Advisory
• 40105-Vendor Advisory
• http://support.apple.com/kb/HT4196
• 1024067-
• APPLE-SA-2010-06-21-1-
• http://support.apple.com/kb/HT4225
• USN-1006-1-
• 41856-
• ADV-2010-2722-
• 43068-
• ADV-2011-0212-
• SUSE-SR:2011:002-
• MDVSA-2011:039-
• ADV-2011-0552-
• oval:org.mitre.oval:def:6649-

 

Keywords

NVD

 

CVE-2010-1389

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures