medium5.0Public exploit code
CVE-2010-0314
Apple Safari allows remote attackers to discover a redirect's target URL, for the session of a specific user of a web site, by placing the site's URL in the HR…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Apple Safari 4.0.4 - Style Sheet redirection Information Disclosure2010-01-09 · remote · windows · Verified
Impact
Apple Safari allows remote attackers to discover a redirect's target URL, for the session of a specific user of a web site, by placing the site's URL in the HREF attribute of a stylesheet LINK element, and then reading the document.styleSheets[0].href property value.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Safari | All versions |
References
- NVD record
- CVE.org record
- http://nomoreroot.blogspot.com/2010/01/little-bug-in-safari-and-google-chrome.html
- http://secunia.com/advisories/41856
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:039
- http://www.ubuntu.com/usn/USN-1006-1
- http://www.vupen.com/english/advisories/2010/2722
- http://www.vupen.com/english/advisories/2011/0552
- http://nomoreroot.blogspot.com/2010/01/little-bug-in-safari-and-google-chrome.html
- http://secunia.com/advisories/41856
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:039
- http://www.ubuntu.com/usn/USN-1006-1
- http://www.vupen.com/english/advisories/2010/2722
- http://www.vupen.com/english/advisories/2011/0552