Lucene search

K
cve[email protected]CVE-2010-2441
HistoryJun 24, 2010 - 5:30 p.m.

CVE-2010-2441

2010-06-2417:30:00
CWE-264
web.nvd.nist.gov
21
cve-2010-2441
webkit
focus change
keystroke reading
cross-domain iframe gadgets
vulnerability

8.3 High

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.005 Low

EPSS

Percentile

76.0%

WebKit does not properly restrict focus changes, which allows remote attackers to read keystrokes via “cross-domain IFRAME gadgets,” a different vulnerability than CVE-2010-1126, CVE-2010-1422, and CVE-2010-2295.

CPENameOperatorVersion
apple:webkitapple webkiteq*

8.3 High

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.005 Low

EPSS

Percentile

76.0%