CVE-2010-1391

 

Published at: - 11-06-2010 08:00

Last modified: - 14-11-2022 06:02

Total changes: - 2

Description

Multiple directory traversal vulnerabilities in the (a) Local Storage and (b) Web SQL database implementations in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allow remote attackers to create arbitrary database files via vectors involving a (1) %2f and .. (dot dot) or (2) %5c and .. (dot dot) in a URL.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:M/Au:N/C:N/I:P/A:N

 

Verification logic

 

Reference

• http://support.apple.com/kb/HT4196
• 40105-Vendor Advisory
• 40620-Patch
• APPLE-SA-2010-06-07-1-Patch, Vendor Advisory
• 1024067-
• ADV-2010-1373-Patch, Vendor Advisory
• http://support.apple.com/kb/HT4225
• APPLE-SA-2010-06-21-1-
• 40753-
• 41856-
• USN-1006-1-
• ADV-2010-2722-
• 43068-
• SUSE-SR:2011:002-
• ADV-2011-0212-
• MDVSA-2011:039-
• ADV-2011-0552-
• oval:org.mitre.oval:def:7082-

 

Keywords

NVD

 

CVE-2010-1391

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures