CVE-2010-3829

CVE-2010-3829 is a WebKit vulnerability described for WebKit in Apple iOS prior to 4.2, where processing of an HTML LINK element with DNS prefetching could bypass the remote image loading setting in Mail. The issue allows remote attackers to bypass access restrictions via a LINK element used for ...

CVE-2010-3829

WebKit in Apple iOS before 4.2 allows remote attackers to bypass the remote image loading setting in Mail via an HTML LINK element with a DNS prefetching property, as demonstrated by an HTML e-mail message that uses a LINK element for X-Confirm-Reading-To functionality, a related issue to...

PT-2010-5110

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 4.2 Description The issue allows remote attackers to bypass the remote image loading setting in Mail via an HTML LINK element with a DNS prefetching property. This can be demonstrated by an HTML e-mail message that...

CVE-2010-3829: Undefined Security Weakness

WebKit in Apple iOS before 4.2 allows remote attackers to bypass the remote image loading setting in Mail via an HTML LINK element with a DNS prefetching property, as demonstrated by an HTML e-mail message that uses a LINK element for X-Confirm-Reading-To functionality, a related issue to...

CVE-2010-3813

The WebCore::HTMLLinkElement::process function in WebCore/html/HTMLLinkElement.cpp in WebKit, as used in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4; webkitgtk before 1.2.6; and possibly other products does not verify whether DNS...

Design/Logic Flaw

The WebCore::HTMLLinkElement::process function in WebCore/html/HTMLLinkElement.cpp in WebKit, as used in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4; webkitgtk before 1.2.6; and possibly other products does not verify whether DNS...

CVE-2010-3813

The WebCore::HTMLLinkElement::process function in WebCore/html/HTMLLinkElement.cpp in WebKit, as used in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4; webkitgtk before 1.2.6; and possibly other products does not verify whether DNS...

CVE-2010-3813

Removed by vendor...

CVE-2010-3813

The WebCore::HTMLLinkElement::process function in WebCore/html/HTMLLinkElement.cpp in WebKit, as used in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4; webkitgtk before 1.2.6; and possibly other products does not verify whether DNS...

CVE-2010-3813

CVE-2010-3813 concerns WebKit: The WebCore::HTMLLinkElement::process function does not verify whether DNS prefetching is enabled when processing a LINK element. This can let remote attackers bypass intended access restrictions, demonstrated by an HTML email using a LINK element for X-Confirm-Read...

CVE-2010-3813: Undefined Security Weakness

The WebCore::HTMLLinkElement::process function in WebCore/html/HTMLLinkElement.cpp in WebKit, as used in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4; webkitgtk before 1.2.6; and possibly other products does not verify whether DNS...

PT-2010-5097

Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 5.0.3 on Mac OS X 10.5 through 10.6 and Windows Apple Safari versions prior to 4.1.3 on Mac OS X 10.4 webkitgtk versions prior to 1.2.6 Description The issue allows remote attackers to bypass intended access...

Fedora 11 : roundcubemail-0.3.1-2.fc11 (2010-1399)

Common Vulnerabilities and Exposures assigned an identifier CVE-2010-0464 to the following vulnerability: Name: CVE-2010-0464 URL: http://cve.mitre.org /cgi-bin/cvename.cgi?name=CVE-2010-0464 Assigned: 20100129 Reference: MISC: https://secure.grepular.com/DNSPrefetchExposureonThunderbirdandW ebma...

Fedora 12 : roundcubemail-0.3.1-2.fc12 (2010-1385)

Common Vulnerabilities and Exposures assigned an identifier CVE-2010-0464 to the following vulnerability: Name: CVE-2010-0464 URL: http://cve.mitre.org /cgi-bin/cvename.cgi?name=CVE-2010-0464 Assigned: 20100129 Reference: MISC: https://secure.grepular.com/DNSPrefetchExposureonThunderbirdandW ebma...

Mandriva Update for roundcubemail MDVSA-2010:048 (roundcubemail)

Check for the Version of roundcubemail OpenVAS Vulnerability Test Mandriva Update for roundcubemail MDVSA-2010:048 roundcubemail Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Mandriva Update for roundcubemail MDVSA-2010:048 (roundcubemail)

Check for the Version of roundcubemail OpenVAS Vulnerability Test Mandriva Update for roundcubemail MDVSA-2010:048 roundcubemail Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

[ MDVSA-2010:048 ] roundcubemail

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2010:048 http://www.mandriva.com/security/ Package : roundcubemail Date : February 25, 2010 Affected: Enterprise Server 5.0 Problem Description: Roundcube 0.3.1 and earlier does not request that the web browser...

[Backports-security-announce] Security Update for roundcube

Holger Levsen uploaded a new package for roundcube which fixed the following security problems: CVE-2010-0464 Roundcube 0.3.1 and earlier does not request that the web browser avoid DNS prefetching of domain names contained in e-mail messages, which makes it easier for remote attackers to determi...

[Backports-security-announce] Security Update for roundcube

Holger Levsen uploaded a new package for roundcube which fixed the following security problems: CVE-2010-0464 Roundcube 0.3.1 and earlier does not request that the web browser avoid DNS prefetching of domain names contained in e-mail messages, which makes it easier for remote attackers to determi...

[Backports-security-announce] Security Update for roundcube

Holger Levsen uploaded a new package for roundcube which fixed the following security problems: CVE-2010-0464 Roundcube 0.3.1 and earlier does not request that the web browser avoid DNS prefetching of domain names contained in e-mail messages, which makes it easier for remote attackers to determi...