Security Advisory

CVE-2010-0656

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2010-02-18 17:19:00
Last updated 2024-08-07 00:59:38
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

WebKit before r51295, as used in Google Chrome before 4.0.249.78, presents a directory-listing page in response to an XMLHttpRequest for a file:/// URL that corresponds to a directory, which allows attackers to obtain sensitive information or possibly have unspecified other impact via a crafted local HTML document.