Lucene search

K
ubuntucveUbuntu.comUB:CVE-2010-0656
HistoryFeb 18, 2010 - 12:00 a.m.

CVE-2010-0656

2010-02-1800:00:00
ubuntu.com
ubuntu.com
7

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.005 Low

EPSS

Percentile

75.6%

WebKit before r51295, as used in Google Chrome before 4.0.249.78, presents
a directory-listing page in response to an XMLHttpRequest for a file:///
URL that corresponds to a directory, which allows attackers to obtain
sensitive information or possibly have unspecified other impact via a
crafted local HTML document.

Bugs

Notes

Author Note
jdstrand qt4-x11 unmaintained upstream (see README.webkit for details) webkit is a fork of khtml from kdelibs. kdelibs5 is farther from it, while qt4-x11 attempts to unify khtml and webkit.
mdeslaur webkitkde is a wrapper around qt4-x11’s webkit. code isn’t present in webkit in hardy-jaunty, need to test
OSVersionArchitecturePackageVersionFilename
ubuntu9.10noarchwebkit< 1.2.5-0ubuntu0.9.10.1UNKNOWN

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.005 Low

EPSS

Percentile

75.6%