CVE-2010-3813

EPSS 1.84%
Veröffentlicht 22.11.2010 13:00:18
Zuletzt bearbeitet 16.06.2026 23:23:35
Erkennungen
Login

The WebCore::HTMLLinkElement::process function in WebCore/html/HTMLLinkElement.cpp in WebKit, as used in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4; webkitgtk before 1.2.6; and possibly other products does not verify whether DNS prefetching is enabled when processing an HTML LINK element, which allows remote attackers to bypass intended access restrictions, as demonstrated by an HTML e-mail message that uses a LINK element for X-Confirm-Reading-To functionality.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 22

NVD 65 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Apple ≫ Safari Version <= 5.0.2

   Apple ≫ macOS X Version 10.5
   Apple ≫ macOS X Version 10.5.0
   Apple ≫ macOS X Version 10.5.1
   Apple ≫ macOS X Version 10.5.2
   Apple ≫ macOS X Version 10.5.3
   Apple ≫ macOS X Version 10.5.4
   Apple ≫ macOS X Version 10.5.5
   Apple ≫ macOS X Version 10.5.6
   Apple ≫ macOS X Version 10.5.7
   Apple ≫ macOS X Version 10.5.8
   Apple ≫ macOS X Version 10.6.0
   Apple ≫ macOS X Version 10.6.1
   Apple ≫ macOS X Version 10.6.2
   Apple ≫ macOS X Version 10.6.3
   Apple ≫ macOS X Version 10.6.4
   Apple ≫ macOS X Version 10.6.5
   Apple ≫ macOS X Server Version 10.5
   Apple ≫ macOS X Server Version 10.5.0
   Apple ≫ macOS X Server Version 10.5.1
   Apple ≫ macOS X Server Version 10.5.2
   Apple ≫ macOS X Server Version 10.5.3
   Apple ≫ macOS X Server Version 10.5.4
   Apple ≫ macOS X Server Version 10.5.5
   Apple ≫ macOS X Server Version 10.5.6
   Apple ≫ macOS X Server Version 10.5.7
   Apple ≫ macOS X Server Version 10.5.8
   Apple ≫ macOS X Server Version 10.6.0
   Apple ≫ macOS X Server Version 10.6.1
   Apple ≫ macOS X Server Version 10.6.2
   Apple ≫ macOS X Server Version 10.6.3
   Apple ≫ macOS X Server Version 10.6.4
   Apple ≫ macOS X Server Version 10.6.5
   Microsoft ≫ Windows 7
   Microsoft ≫ Windows Vista
   Microsoft ≫ Windows Xp Update sp2

Apple ≫ Safari Version 5.0

Apple ≫ Safari Version 5.0.1

Apple ≫ WebKit

Apple ≫ Safari Version <= 4.1.2

   Apple ≫ macOS X Version 10.4
   Apple ≫ macOS X Version 10.4.0
   Apple ≫ macOS X Version 10.4.1
   Apple ≫ macOS X Version 10.4.2
   Apple ≫ macOS X Version 10.4.3
   Apple ≫ macOS X Version 10.4.4
   Apple ≫ macOS X Version 10.4.5
   Apple ≫ macOS X Version 10.4.6
   Apple ≫ macOS X Version 10.4.7
   Apple ≫ macOS X Version 10.4.8
   Apple ≫ macOS X Version 10.4.9
   Apple ≫ macOS X Version 10.4.10
   Apple ≫ macOS X Version 10.4.11
   Apple ≫ macOS X Server Version 10.4
   Apple ≫ macOS X Server Version 10.4.0
   Apple ≫ macOS X Server Version 10.4.1
   Apple ≫ macOS X Server Version 10.4.2
   Apple ≫ macOS X Server Version 10.4.3
   Apple ≫ macOS X Server Version 10.4.4
   Apple ≫ macOS X Server Version 10.4.5
   Apple ≫ macOS X Server Version 10.4.6
   Apple ≫ macOS X Server Version 10.4.7
   Apple ≫ macOS X Server Version 10.4.8
   Apple ≫ macOS X Server Version 10.4.9
   Apple ≫ macOS X Server Version 10.4.10
   Apple ≫ macOS X Server Version 10.4.11

Apple ≫ Safari Version 1.0

Apple ≫ Safari Version 1.0 Update beta

Apple ≫ Safari Version 1.0 Update beta2

Apple ≫ Safari Version 1.0.0

Apple ≫ Safari Version 1.0.0b1

Apple ≫ Safari Version 1.0.0b2

Apple ≫ Safari Version 1.0.1

Apple ≫ Safari Version 1.0.2

Apple ≫ Safari Version 1.0.3

Apple ≫ Safari Version 1.0.3 Update 85.8

Apple ≫ Safari Version 1.0.3 Update 85.8.1

Apple ≫ Safari Version 1.1

Apple ≫ Safari Version 1.1.0

Apple ≫ Safari Version 1.1.1

Apple ≫ Safari Version 1.2

Apple ≫ Safari Version 1.2.0

Apple ≫ Safari Version 1.2.1

Apple ≫ Safari Version 1.2.2

Apple ≫ Safari Version 1.2.3

Apple ≫ Safari Version 1.2.4

Apple ≫ Safari Version 1.2.5

Apple ≫ Safari Version 1.3

Apple ≫ Safari Version 1.3.0

Apple ≫ Safari Version 1.3.1

Apple ≫ Safari Version 1.3.2

Apple ≫ Safari Version 1.3.2 Update 312.5

Apple ≫ Safari Version 1.3.2 Update 312.6

Apple ≫ Safari Version 2

Apple ≫ Safari Version 2.0

Apple ≫ Safari Version 2.0.0

Apple ≫ Safari Version 2.0.1

Apple ≫ Safari Version 2.0.2

Apple ≫ Safari Version 2.0.3

Apple ≫ Safari Version 2.0.3 Update 417.8

Apple ≫ Safari Version 2.0.3 Update 417.9

Apple ≫ Safari Version 2.0.3 Update 417.9.2

Apple ≫ Safari Version 2.0.3 Update 417.9.3

Apple ≫ Safari Version 2.0.4

Apple ≫ Safari Version 3

Apple ≫ Safari Version 3.0

Apple ≫ Safari Version 3.0.0

Apple ≫ Safari Version 3.0.0b

Apple ≫ Safari Version 3.0.1

Apple ≫ Safari Version 3.0.1b

Apple ≫ Safari Version 3.0.2

Apple ≫ Safari Version 3.0.2b

Apple ≫ Safari Version 3.0.3

Apple ≫ Safari Version 3.0.3b

Apple ≫ Safari Version 3.0.4

Apple ≫ Safari Version 3.0.4b

Apple ≫ Safari Version 3.1.0

Apple ≫ Safari Version 3.1.0b

Apple ≫ Safari Version 3.1.1

Apple ≫ Safari Version 3.1.2

Apple ≫ Safari Version 3.2.0

Apple ≫ Safari Version 3.2.1

Apple ≫ Safari Version 3.2.2

Apple ≫ Safari Version 4.1

Apple ≫ Safari Version 4.1.1

Apple ≫ WebKit

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.84%	0.762

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	5.8	8.6	4.9	AV:N/AC:M/Au:N/C:P/I:P/A:N

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html

http://secunia.com/advisories/43068

http://www.vupen.com/english/advisories/2011/0212

http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html

http://secunia.com/advisories/42314

http://support.apple.com/kb/HT4456

http://www.vupen.com/english/advisories/2010/3046

http://www.mandriva.com/security/advisories?name=MDVSA-2011:039

http://www.vupen.com/english/advisories/2011/0552

http://secunia.com/advisories/43086

http://www.redhat.com/support/errata/RHSA-2011-0177.html

http://www.vupen.com/english/advisories/2011/0216

http://lists.apple.com/archives/security-announce/2010//Nov/msg00002.html

Vendor Advisory

http://support.apple.com/kb/HT4455

Patch

Vendor Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052906.html

http://trac.webkit.org/changeset/63622

https://bugs.webkit.org/show_bug.cgi?id=42500

https://bugzilla.redhat.com/show_bug.cgi?id=667024

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12293

https://nvd.nist.gov/vuln/detail/CVE-2010-3813

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2010-3813

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2010-3813

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2010-3813