NetSight
IP …
medium4.3

CVE-2010-3259

WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 6.0.472.53, and webkitgtk before 1.2.6, does not properly restrict re…

Impact

WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 6.0.472.53, and webkitgtk before 1.2.6, does not properly restrict read access to images derived from CANVAS elements, which allows remote attackers to bypass the Same Origin Policy and obtain potentially sensitive image data via a crafted web site.

Affected products

VendorProductAffected versions
GoogleChrome
before 6.0.472.53
WebkitgtkWebkitgtk
before 1.2.6
AppleSafari
before 4.1.3
from 5.0 before 5.0.3
AppleIphone Os
before 4.2
CanonicalUbuntu Linux
Versions 9.10, 10.04, 10.10

Weakness classification

CWE-200

References