CVE-2010-1386

2010-08-1900:00:00

ubuntu.com

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.01

Percentile

83.9%

JSON

page/Geolocation.cpp in WebCore in WebKit before r56188 and before 1.2.5
does not properly restrict access to the lastPosition function, which has
unspecified impact and remote attack vectors, aka rdar problem 7746357.

Bugs

<https://bugs.webkit.org/show_bug.cgi?id=36255>

Notes

Author	Note
jdstrand	qt4-x11 unmaintained upstream (see README.webkit for details) webkit is a fork of khtml from kdelibs. kdelibs5 is farther from it, while qt4-x11 attempts to unify khtml and webkit.
mdeslaur	webkitkde is a wrapper around qt4-x11’s webkit.

OSVersionArchitecturePackageVersionFilename
ubuntu9.10noarchwebkit< 1.2.5-0ubuntu0.9.10.1UNKNOWN
ubuntu10.04noarchwebkit< 1.2.5-0ubuntu0.10.04.1UNKNOWN