5

CVE-2010-5070

Exploit

EPSS 0.2%
Published 07.12.2011 19:55:01
Last modified 11.04.2025 00:51:21
Source cve@mitre.org
Teams watchlist Login
Open Login

The JavaScript implementation in Apple Safari 4 does not properly restrict the set of values contained in the object returned by the getComputedStyle method, which allows remote attackers to obtain sensitive information about visited web pages by calling this method, a different vulnerability than CVE-2010-2264.  NOTE: this may overlap CVE-2010-5073.

Affected products Warnungen 0 Metrics 2 CWE 0 References 4

Data is provided by the National Vulnerability Database (NVD)

Apple ≫ Safari Version4.0

Apple ≫ Safari Version4.0 Updatebeta

Apple ≫ Safari Version4.0.0b

Apple ≫ Safari Version4.0.1

Apple ≫ Safari Version4.0.2

Apple ≫ Safari Version4.0.3

Apple ≫ Safari Version4.0.4

Apple ≫ Safari Version4.0.5

Apple ≫ Safari Version4.1

Apple ≫ Safari Version4.1.1

Apple ≫ Safari Version4.1.2

Apple ≫ Safari Version4.1.3

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.2%	0.395

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

http://w2spconf.com/2010/papers/p26.pdf

Exploit

https://nvd.nist.gov/vuln/detail/CVE-2010-5070

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2010-5070

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2010-5070

EUVD