PT-2010-2105 · Apple · Safari

Cesar Cerrudo · Published 2010-01-14 · Updated 2011-03-18 · CVE-2010-0314

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apple Safari (affected versions not specified)

Description The issue allows remote attackers to discover a redirect's target URL for a specific user's session on a web site. This can be achieved by placing the site's URL in the HREF attribute of a stylesheet LINK element and then reading the document.styleSheets[0].href property value.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2010-0314

Affected Products

Safari

References · 8

• 🔥 http://nomoreroot.blogspot.com/2010/01/little-bug-in-safari-and-google-chrome.html · Exploit
• 🔥 https://exploit-db.com/exploits/33563 · Exploit
• http://ubuntu.com/usn/USN-1006-1 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2011:039 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-0314 · Security Note
• http://vupen.com/english/advisories/2010/2722 · Note
• http://secunia.com/advisories/41856 · Note
• http://vupen.com/english/advisories/2011/0552 · Note