Lucene search
HistoryJul 30, 2010 - 8:30 p.m.
CVE-2010-1796
apple safari
autofill
cve-2010-1796
security vulnerability
address book
javascript
keystroke events
2.6 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:H/Au:N/C:P/I:N/A:N
5.8 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
72.2%
The AutoFill feature in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4, allows remote attackers to obtain sensitive Address Book Card information via JavaScript code that forces keystroke events for input fields.
Affected configurations
Node
applesafariRange≤5.0
ORapplesafariMatch4.0
ORapplesafariMatch4.0.0b
ORapplesafariMatch4.0.1
ORapplesafariMatch4.0.2
ORapplesafariMatch4.0.3
ORapplesafariMatch4.0.4
ORapplesafariMatch4.0.5
ORapplewebkit
applemac_os_xMatch10.5
ORapplemac_os_xMatch10.5.0
ORapplemac_os_xMatch10.5.1
ORapplemac_os_xMatch10.5.2
ORapplemac_os_xMatch10.5.3
ORapplemac_os_xMatch10.5.4
ORapplemac_os_xMatch10.5.5
ORapplemac_os_xMatch10.5.6
ORapplemac_os_xMatch10.5.7
ORapplemac_os_xMatch10.5.8
ORapplemac_os_xMatch10.6.0
ORapplemac_os_xMatch10.6.1
ORapplemac_os_xMatch10.6.2
ORapplemac_os_xMatch10.6.3
ORapplemac_os_xMatch10.6.4
ORapplemac_os_x_serverMatch10.5
ORapplemac_os_x_serverMatch10.5.0
ORapplemac_os_x_serverMatch10.5.1
ORapplemac_os_x_serverMatch10.5.2
ORapplemac_os_x_serverMatch10.5.3
ORapplemac_os_x_serverMatch10.5.4
ORapplemac_os_x_serverMatch10.5.5
ORapplemac_os_x_serverMatch10.5.6
ORapplemac_os_x_serverMatch10.5.7
ORapplemac_os_x_serverMatch10.5.8
ORapplemac_os_x_serverMatch10.6.0
ORapplemac_os_x_serverMatch10.6.1
ORapplemac_os_x_serverMatch10.6.2
ORapplemac_os_x_serverMatch10.6.3
ORapplemac_os_x_serverMatch10.6.4
ORmicrosoftwindows_7
ORmicrosoftwindows_vista
ORmicrosoftwindows_xpsp2
ORmicrosoftwindows_xpsp3
Node
applesafariRange≤4.1
ORapplesafariMatch4.0
ORapplesafariMatch4.0.0b
ORapplesafariMatch4.0.1
ORapplesafariMatch4.0.2
ORapplesafariMatch4.0.3
ORapplesafariMatch4.0.4
ORapplesafariMatch4.0.5
ORapplewebkit
applemac_os_xMatch10.4
ORapplemac_os_xMatch10.4.0
ORapplemac_os_xMatch10.4.1
ORapplemac_os_xMatch10.4.2
ORapplemac_os_xMatch10.4.3
ORapplemac_os_xMatch10.4.4
ORapplemac_os_xMatch10.4.5
ORapplemac_os_xMatch10.4.6
ORapplemac_os_xMatch10.4.7
ORapplemac_os_xMatch10.4.8
ORapplemac_os_xMatch10.4.9
ORapplemac_os_xMatch10.4.10
ORapplemac_os_xMatch10.4.11
ORapplemac_os_x_serverMatch10.4
ORapplemac_os_x_serverMatch10.4.0
ORapplemac_os_x_serverMatch10.4.1
ORapplemac_os_x_serverMatch10.4.2
ORapplemac_os_x_serverMatch10.4.3
ORapplemac_os_x_serverMatch10.4.4
ORapplemac_os_x_serverMatch10.4.5
ORapplemac_os_x_serverMatch10.4.6
ORapplemac_os_x_serverMatch10.4.7
ORapplemac_os_x_serverMatch10.4.8
ORapplemac_os_x_serverMatch10.4.9
ORapplemac_os_x_serverMatch10.4.10
ORapplemac_os_x_serverMatch10.4.11
Related
cvelist
cvelist
CVE-2010-1796
2010-07-30 20:00:00
ubuntucve
ubuntucve
CVE-2010-1796
2010-07-30 00:00:00
prion
prion
Input validation
2010-07-30 20:30:00
nvd
nvd
CVE-2010-1796
2010-07-30 20:30:02
debiancve
debiancve
CVE-2010-1796
2010-07-30 20:30:00
nessus
nessus
Safari < 4.1.1 / 5.0.1 Multiple Vulnerabilities
2010-07-28 00:00:00
Safari < 4.1.1 / 5.0.1 Multiple Vulnerabilities
2010-07-28 00:00:00
Mac OS X : Apple Safari < 5.0.1 / 4.1.1
2010-07-28 00:00:00
openvas
openvas
Apple Safari Multiple Vulnerabilities (Jul 2010)
2010-08-02 00:00:00
Apple Safari Multiple Vulnerabilities - July 10
2010-08-02 00:00:00
securityvulns
securityvulns
About the security content of Safari 5.0.1 and Safari 4.1.1
2010-08-08 00:00:00
Apple Webkit / Safari multiple security vulnerabilities
2010-08-14 00:00:00
2.6 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:H/Au:N/C:P/I:N/A:N
5.8 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
72.2%
Related for CVE-2010-1796