NetSight
IP …
medium4.3

CVE-2010-1391

Multiple directory traversal vulnerabilities in the (a) Local Storage and (b) Web SQL database implementations in WebKit in Apple Safari before 5.0 on Mac OS X…

Impact

Multiple directory traversal vulnerabilities in the (a) Local Storage and (b) Web SQL database implementations in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allow remote attackers to create arbitrary database files via vectors involving a (1) %2f and .. (dot dot) or (2) %5c and .. (dot dot) in a URL.

Affected products

VendorProductAffected versions
AppleSafari
through 4.0.5
Versions 4.0, 4.0.0b, 4.0.1, 4.0.2, 4.0.3
AppleWebkit
All versions

Weakness classification

CWE-22

References