CVE-2010-3813

EPSS 1.11%
Published 22.11.2010 13:00:18
Last modified 11.04.2025 00:51:21
Source product-security@apple.com
Teams watchlist Login
Open Login

The WebCore::HTMLLinkElement::process function in WebCore/html/HTMLLinkElement.cpp in WebKit, as used in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4; webkitgtk before 1.2.6; and possibly other products does not verify whether DNS prefetching is enabled when processing an HTML LINK element, which allows remote attackers to bypass intended access restrictions, as demonstrated by an HTML e-mail message that uses a LINK element for X-Confirm-Reading-To functionality.

Affected products Warnungen 0 Metrics 2 CWE 0 References 22

Data is provided by the National Vulnerability Database (NVD)

Apple ≫ Safari Version <= 5.0.2

   Apple ≫ macOS X Version10.5
   Apple ≫ macOS X Version10.5.0
   Apple ≫ macOS X Version10.5.1
   Apple ≫ macOS X Version10.5.2
   Apple ≫ macOS X Version10.5.3
   Apple ≫ macOS X Version10.5.4
   Apple ≫ macOS X Version10.5.5
   Apple ≫ macOS X Version10.5.6
   Apple ≫ macOS X Version10.5.7
   Apple ≫ macOS X Version10.5.8
   Apple ≫ macOS X Version10.6.0
   Apple ≫ macOS X Version10.6.1
   Apple ≫ macOS X Version10.6.2
   Apple ≫ macOS X Version10.6.3
   Apple ≫ macOS X Version10.6.4
   Apple ≫ macOS X Version10.6.5
   Apple ≫ macOS X Server Version10.5
   Apple ≫ macOS X Server Version10.5.0
   Apple ≫ macOS X Server Version10.5.1
   Apple ≫ macOS X Server Version10.5.2
   Apple ≫ macOS X Server Version10.5.3
   Apple ≫ macOS X Server Version10.5.4
   Apple ≫ macOS X Server Version10.5.5
   Apple ≫ macOS X Server Version10.5.6
   Apple ≫ macOS X Server Version10.5.7
   Apple ≫ macOS X Server Version10.5.8
   Apple ≫ macOS X Server Version10.6.0
   Apple ≫ macOS X Server Version10.6.1
   Apple ≫ macOS X Server Version10.6.2
   Apple ≫ macOS X Server Version10.6.3
   Apple ≫ macOS X Server Version10.6.4
   Apple ≫ macOS X Server Version10.6.5
   Microsoft ≫ Windows 7
   Microsoft ≫ Windows Vista
   Microsoft ≫ Windows Xp Updatesp2

Apple ≫ Safari Version5.0

Apple ≫ Safari Version5.0.1

Apple ≫ WebKit

Apple ≫ Safari Version <= 4.1.2

   Apple ≫ macOS X Version10.4
   Apple ≫ macOS X Version10.4.0
   Apple ≫ macOS X Version10.4.1
   Apple ≫ macOS X Version10.4.2
   Apple ≫ macOS X Version10.4.3
   Apple ≫ macOS X Version10.4.4
   Apple ≫ macOS X Version10.4.5
   Apple ≫ macOS X Version10.4.6
   Apple ≫ macOS X Version10.4.7
   Apple ≫ macOS X Version10.4.8
   Apple ≫ macOS X Version10.4.9
   Apple ≫ macOS X Version10.4.10
   Apple ≫ macOS X Version10.4.11
   Apple ≫ macOS X Server Version10.4
   Apple ≫ macOS X Server Version10.4.0
   Apple ≫ macOS X Server Version10.4.1
   Apple ≫ macOS X Server Version10.4.2
   Apple ≫ macOS X Server Version10.4.3
   Apple ≫ macOS X Server Version10.4.4
   Apple ≫ macOS X Server Version10.4.5
   Apple ≫ macOS X Server Version10.4.6
   Apple ≫ macOS X Server Version10.4.7
   Apple ≫ macOS X Server Version10.4.8
   Apple ≫ macOS X Server Version10.4.9
   Apple ≫ macOS X Server Version10.4.10
   Apple ≫ macOS X Server Version10.4.11

Apple ≫ Safari Version1.0