NetSight
IP …
medium4.3

CVE-2010-0656

WebKit before r51295, as used in Google Chrome before 4.0.249.78, presents a directory-listing page in response to an XMLHttpRequest for a file:/// URL that co…

Impact

WebKit before r51295, as used in Google Chrome before 4.0.249.78, presents a directory-listing page in response to an XMLHttpRequest for a file:/// URL that corresponds to a directory, which allows attackers to obtain sensitive information or possibly have unspecified other impact via a crafted local HTML document.

Affected products

VendorProductAffected versions
AppleWebkit
through r51280
GoogleChrome
through 4.0.249.78
Versions 0.2.149.27, 0.2.149.29, 0.2.149.30, 0.2.152.1, 0.2.153.1

Weakness classification

CWE-200

References