NVD Vulnerability Detail

CVE-2010-1386

Summary	page/Geolocation.cpp in WebCore in WebKit before r56188 and before 1.2.5 does not properly restrict access to the lastPosition function, which has unspecified impact and remote attack vectors, aka rdar problem 7746357.
Publication Date	Aug. 20, 2010, 7 a.m.
Registration Date	Jan. 29, 2021, 10:59 a.m.
Last Update	Nov. 21, 2024, 10:14 a.m.

Affected software configurations

Related information, measures and tools

No	URL	タグ
1	http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
2	http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
3	http://secunia.com/advisories/41856	Vendor Advisory
4	http://secunia.com/advisories/41856	Vendor Advisory
5	http://secunia.com/advisories/43068	Vendor Advisory
6	http://secunia.com/advisories/43068	Vendor Advisory
7	http://security-tracker.debian.org/tracker/CVE-2010-1386
8	http://security-tracker.debian.org/tracker/CVE-2010-1386
9	http://trac.webkit.org/changeset/56188
10	http://trac.webkit.org/changeset/56188
11	http://www.mandriva.com/security/advisories?name=MDVSA-2011:039
12	http://www.mandriva.com/security/advisories?name=MDVSA-2011:039
13	http://www.securityfocus.com/bid/42500
14	http://www.securityfocus.com/bid/42500
15	http://www.ubuntu.com/usn/USN-1006-1
16	http://www.ubuntu.com/usn/USN-1006-1
17	http://www.vupen.com/english/advisories/2010/2722	Vendor Advisory
18	http://www.vupen.com/english/advisories/2010/2722	Vendor Advisory
19	http://www.vupen.com/english/advisories/2011/0212	Vendor Advisory
20	http://www.vupen.com/english/advisories/2011/0212	Vendor Advisory
21	http://www.vupen.com/english/advisories/2011/0552	Vendor Advisory
22	http://www.vupen.com/english/advisories/2011/0552	Vendor Advisory
23	https://bugs.webkit.org/show_bug.cgi?id=36255
24	https://bugs.webkit.org/show_bug.cgi?id=36255

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-264	認可・権限・アクセス制御	https://cwe.mitre.org/data/definitions/264.html

JVN Vulnerability Information

WebKit の page/Geolocation.cpp における詳細不明な脆弱性

Title	WebKit の page/Geolocation.cpp における詳細不明な脆弱性
Summary	WebKit の WebCore の page/Geolocation.cpp は、lastPosition 関数へのアクセスを適切に制限しないため、詳細不明な脆弱性が存在します。
Possible impacts	この脆弱性による影響の詳細は不明です。
Solution	ベンダ情報および参考情報を参照して適切な対策を実施してください。
Publication Date	Aug. 19, 2010, midnight
Registration Date	June 26, 2012, 4:19 p.m.
Last Update	June 26, 2012, 4:19 p.m.

Affected System

アップル

WebKit r56188 未満、および 1.2.5 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2010-1386	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1386
National Vulnerability Database (NVD)
2	CVE-2010-1386	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-1386

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-264	https://jvndb.jvn.jp/ja/cwe/CWE-264.html

ベンダー情報

No	Name	URL
Apple
1	Top Page	http://www.apple.com/

Change Log

No	Changed Details	Date of change
0	[2012年06月26日] 掲載	Feb. 17, 2018, 10:37 a.m.