Lucene search

K
ubuntucveUbuntu.comUB:CVE-2010-1386
HistoryAug 19, 2010 - 12:00 a.m.

CVE-2010-1386

2010-08-1900:00:00
ubuntu.com
ubuntu.com
8

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.01 Low

EPSS

Percentile

83.7%

page/Geolocation.cpp in WebCore in WebKit before r56188 and before 1.2.5
does not properly restrict access to the lastPosition function, which has
unspecified impact and remote attack vectors, aka rdar problem 7746357.

Bugs

Notes

Author Note
jdstrand qt4-x11 unmaintained upstream (see README.webkit for details) webkit is a fork of khtml from kdelibs. kdelibs5 is farther from it, while qt4-x11 attempts to unify khtml and webkit.
mdeslaur webkitkde is a wrapper around qt4-x11’s webkit.
OSVersionArchitecturePackageVersionFilename
ubuntu9.10noarchwebkit< 1.2.5-0ubuntu0.9.10.1UNKNOWN
ubuntu10.04noarchwebkit< 1.2.5-0ubuntu0.10.04.1UNKNOWN

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.01 Low

EPSS

Percentile

83.7%