CVE-2010-0651
EUVD-2010-068218.02.2010, 18:00
WebKit before r52784, as used in Google Chrome before 4.0.249.78 and Apple Safari before 4.0.5, permits cross-origin loading of CSS stylesheets even when the stylesheet download has an incorrect MIME type and the stylesheet document is malformed, which allows remote attackers to obtain sensitive information via a crafted document.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| apple | webkit | 𝑥 ≤ r53524 |
| chrome | 𝑥 ≤ 4.0.249.78 | |
| apple | safari | 𝑥 ≤ 4.0.4 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| chromium-browser |
| ||||||||||||||||||
| qt4-x11 |
| ||||||||||||||||||
| webkit |
|
Common Weakness Enumeration
References