CVE-2010-1386

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
• secunia.com/advisories/41856 · Vendor Advisory
• secunia.com/advisories/43068 · Vendor Advisory
• security-tracker.debian.org/tracker/CVE-2010-1386
• trac.webkit.org/changeset/56188
• mandriva.com/security/advisories
• securityfocus.com/bid/42500
• ubuntu.com/usn/USN-1006-1
• vupen.com/english/advisories/2010/2722 · Vendor Advisory
• vupen.com/english/advisories/2011/0212 · Vendor Advisory
• vupen.com/english/advisories/2011/0552 · Vendor Advisory
• bugs.webkit.org/show_bug.cgi

webkit のその他の脆弱性

• CVE-2010-1760緊急 10.0loader/DocumentThreadableLoader.cpp in the XMLHttpRequest implementation in WebCore in WebKit before r58409 does not properly handle credent…
• CVE-2010-0661中 6.8WebCore/bindings/v8/custom/V8DOMWindowCustom.cpp in WebKit before r52401, as used in Google Chrome before 4.0.249.78, allows remote attacker…
• CVE-2010-0659緊急 9.3The image decoder in WebKit before r52833, as used in Google Chrome before 4.0.249.78, does not properly handle a failure of memory allocati…
• CVE-2010-0656中 4.3WebKit before r51295, as used in Google Chrome before 4.0.249.78, presents a directory-listing page in response to an XMLHttpRequest for a f…
• CVE-2010-0651中 4.3WebKit before r52784, as used in Google Chrome before 4.0.249.78 and Apple Safari before 4.0.5, permits cross-origin loading of CSS styleshe…