NetSight
critical9.3

CVE-2010-1383

CFNetwork in Apple Safari before 5.0.6 on Windows allows remote web servers to execute arbitrary code by replaying the NTLM credentials of a client user, relat…

Impact

CFNetwork in Apple Safari before 5.0.6 on Windows allows remote web servers to execute arbitrary code by replaying the NTLM credentials of a client user, related to a "credential reflection" issue.

Affected products

VendorProductAffected versions
AppleCfnetwork
All versions
AppleSafari
through 5.0.5
Versions 1.0, 1.0.0, 1.0.0b1, 1.0.0b2, 1.0.1

Weakness classification

References