CVE-2010-3813

EPSS 1.84%
Veröffentlicht 22.11.2010 13:00:18
Zuletzt bearbeitet 16.06.2026 23:23:35
Quelle product-security@apple.com
CVE-Watchlists
Login
Unerledigt
Login

The WebCore::HTMLLinkElement::process function in WebCore/html/HTMLLinkElement.cpp in WebKit, as used in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4; webkitgtk before 1.2.6; and possibly other products does not verify whether DNS prefetching is enabled when processing an HTML LINK element, which allows remote attackers to bypass intended access restrictions, as demonstrated by an HTML e-mail message that uses a LINK element for X-Confirm-Reading-To functionality.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 22

NVD 65 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Apple ≫ Safari Version <= 5.0.2

   Apple ≫ macOS X Version10.5
   Apple ≫ macOS X Version10.5.0
   Apple ≫ macOS X Version10.5.1
   Apple ≫ macOS X Version10.5.2
   Apple ≫ macOS X Version10.5.3
   Apple ≫ macOS X Version10.5.4
   Apple ≫ macOS X Version10.5.5
   Apple ≫ macOS X Version10.5.6
   Apple ≫ macOS X Version10.5.7
   Apple ≫ macOS X Version10.5.8
   Apple ≫ macOS X Version10.6.0
   Apple ≫ macOS X Version10.6.1
   Apple ≫ macOS X Version10.6.2
   Apple ≫ macOS X Version10.6.3
   Apple ≫ macOS X Version10.6.4
   Apple ≫ macOS X Version10.6.5
   Apple ≫ macOS X Server Version10.5
   Apple ≫ macOS X Server Version10.5.0
   Apple ≫ macOS X Server Version10.5.1
   Apple ≫ macOS X Server Version10.5.2
   Apple ≫ macOS X Server Version10.5.3
   Apple ≫ macOS X Server Version10.5.4
   Apple ≫ macOS X Server Version10.5.5
   Apple ≫ macOS X Server Version10.5.6
   Apple ≫ macOS X Server Version10.5.7
   Apple ≫ macOS X Server Version10.5.8
   Apple ≫ macOS X Server Version10.6.0
   Apple ≫ macOS X Server Version10.6.1
   Apple ≫ macOS X Server Version10.6.2
   Apple ≫ macOS X Server Version10.6.3
   Apple ≫ macOS X Server Version10.6.4
   Apple ≫ macOS X Server Version10.6.5
   Microsoft ≫ Windows 7
   Microsoft ≫ Windows Vista
   Microsoft ≫ Windows Xp Updatesp2

Apple ≫ Safari Version5.0

Apple ≫ Safari Version5.0.1

Apple ≫ WebKit

Apple ≫ Safari Version <= 4.1.2

   Apple ≫ macOS X Version10.4
   Apple ≫ macOS X Version10.4.0
   Apple ≫ macOS X Version10.4.1
   Apple ≫ macOS X Version10.4.2
   Apple ≫ macOS X Version10.4.3
   Apple ≫ macOS X Version10.4.4
   Apple ≫ macOS X Version10.4.5
   Apple ≫ macOS X Version10.4.6
   Apple ≫ macOS X Version10.4.7
   Apple ≫ macOS X Version10.4.8
   Apple ≫ macOS X Version10.4.9
   Apple ≫ macOS X Version10.4.10
   Apple ≫ macOS X Version10.4.11
   Apple ≫ macOS X Server Version10.4
   Apple ≫ macOS X Server Version10.4.0
   Apple ≫ macOS X Server Version10.4.1
   Apple ≫ macOS X Server Version10.4.2
   Apple ≫ macOS X Server Version10.4.3
   Apple ≫ macOS X Server Version10.4.4
   Apple ≫ macOS X Server Version10.4.5
   Apple ≫ macOS X Server Version10.4.6
   Apple ≫ macOS X Server Version10.4.7
   Apple ≫ macOS X Server Version10.4.8
   Apple ≫ macOS X Server Version10.4.9
   Apple ≫ macOS X Server Version10.4.10
   Apple ≫ macOS X Server Version10.4.11

Apple ≫ Safari Version1.0

Apple ≫ Safari Version1.0 Updatebeta

Apple ≫ Safari Version1.0 Updatebeta2

Apple ≫ Safari Version1.0.0

Apple ≫ Safari Version1.0.0b1

Apple ≫ Safari Version1.0.0b2

Apple ≫ Safari Version1.0.1

Apple ≫ Safari Version1.0.2

Apple ≫ Safari Version1.0.3

Apple ≫ Safari Version1.0.3 Update85.8

Apple ≫ Safari Version1.0.3 Update85.8.1

Apple ≫ Safari Version1.1

Apple ≫ Safari Version1.1.0

Apple ≫ Safari Version1.1.1

Apple ≫ Safari Version1.2

Apple ≫ Safari Version1.2.0

Apple ≫ Safari Version1.2.1

Apple ≫ Safari Version1.2.2

Apple ≫ Safari Version1.2.3

Apple ≫ Safari Version1.2.4

Apple ≫ Safari Version1.2.5

Apple ≫ Safari Version1.3

Apple ≫ Safari Version1.3.0

Apple ≫ Safari Version1.3.1

Apple ≫ Safari Version1.3.2

Apple ≫ Safari Version1.3.2 Update312.5

Apple ≫ Safari Version1.3.2 Update312.6

Apple ≫ Safari Version2

Apple ≫ Safari Version2.0

Apple ≫ Safari Version2.0.0

Apple ≫ Safari Version2.0.1

Apple ≫ Safari Version2.0.2

Apple ≫ Safari Version2.0.3

Apple ≫ Safari Version2.0.3 Update417.8

Apple ≫ Safari Version2.0.3 Update417.9

Apple ≫ Safari Version2.0.3 Update417.9.2

Apple ≫ Safari Version2.0.3 Update417.9.3

Apple ≫ Safari Version2.0.4

Apple ≫ Safari Version3

Apple ≫ Safari Version3.0

Apple ≫ Safari Version3.0.0

Apple ≫ Safari Version3.0.0b

Apple ≫ Safari Version3.0.1

Apple ≫ Safari Version3.0.1b

Apple ≫ Safari Version3.0.2

Apple ≫ Safari Version3.0.2b

Apple ≫ Safari Version3.0.3

Apple ≫ Safari Version3.0.3b

Apple ≫ Safari Version3.0.4

Apple ≫ Safari Version3.0.4b

Apple ≫ Safari Version3.1.0

Apple ≫ Safari Version3.1.0b

Apple ≫ Safari Version3.1.1

Apple ≫ Safari Version3.1.2

Apple ≫ Safari Version3.2.0

Apple ≫ Safari Version3.2.1

Apple ≫ Safari Version3.2.2

Apple ≫ Safari Version4.1

Apple ≫ Safari Version4.1.1

Apple ≫ WebKit

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.84%	0.762

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5.8	8.6	4.9	AV:N/AC:M/Au:N/C:P/I:P/A:N

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html

http://secunia.com/advisories/43068

http://www.vupen.com/english/advisories/2011/0212

http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html

http://secunia.com/advisories/42314

http://support.apple.com/kb/HT4456

http://www.vupen.com/english/advisories/2010/3046

http://www.mandriva.com/security/advisories?name=MDVSA-2011:039

http://www.vupen.com/english/advisories/2011/0552

http://secunia.com/advisories/43086

http://www.redhat.com/support/errata/RHSA-2011-0177.html

http://www.vupen.com/english/advisories/2011/0216

http://lists.apple.com/archives/security-announce/2010//Nov/msg00002.html

Vendor Advisory

http://support.apple.com/kb/HT4455

Patch

Vendor Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052906.html

http://trac.webkit.org/changeset/63622

https://bugs.webkit.org/show_bug.cgi?id=42500

https://bugzilla.redhat.com/show_bug.cgi?id=667024

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12293

https://nvd.nist.gov/vuln/detail/CVE-2010-3813

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2010-3813

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2010-3813

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2010-3813