CVE-2010-1760
EUVD-2010-178019.08.2010, 22:00
loader/DocumentThreadableLoader.cpp in the XMLHttpRequest implementation in WebCore in WebKit before r58409 does not properly handle credentials during a cross-origin synchronous request, which has unspecified impact and remote attack vectors, aka rdar problem 7905150.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| apple | webkit | 𝑥 ≤ r58408 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| chromium-browser |
| ||||||||||||||||
| qt4-x11 |
| ||||||||||||||||
| webkit |
|
Common Weakness Enumeration
References