Beveiligingsadvies

CVE-2010-3259

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2010-09-07 17:00:00

Laatst bijgewerkt 2024-08-07 03:03:18

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 6.0.472.53, and webkitgtk before 1.2.6, does not properly restrict read access to images derived from CANVAS elements, which allows remote attackers to bypass the Same Origin Policy and obtain potentially sensitive image data via a crafted web site.

← Alle CVE's bekijken Bekijk op cve.org ↗