5

CVE-2010-5070

Exploit

EPSS 0.2%
Veröffentlicht 07.12.2011 19:55:01
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

The JavaScript implementation in Apple Safari 4 does not properly restrict the set of values contained in the object returned by the getComputedStyle method, which allows remote attackers to obtain sensitive information about visited web pages by calling this method, a different vulnerability than CVE-2010-2264.  NOTE: this may overlap CVE-2010-5073.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Apple ≫ Safari Version4.0

Apple ≫ Safari Version4.0 Updatebeta

Apple ≫ Safari Version4.0.0b

Apple ≫ Safari Version4.0.1

Apple ≫ Safari Version4.0.2

Apple ≫ Safari Version4.0.3

Apple ≫ Safari Version4.0.4

Apple ≫ Safari Version4.0.5

Apple ≫ Safari Version4.1

Apple ≫ Safari Version4.1.1

Apple ≫ Safari Version4.1.2

Apple ≫ Safari Version4.1.3

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.2%	0.395

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

http://w2spconf.com/2010/papers/p26.pdf

Exploit

https://nvd.nist.gov/vuln/detail/CVE-2010-5070

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2010-5070

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2010-5070

EUVD