Security Advisory

CVE-2010-1391

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2010-06-11 17:28:00

Last updated 2024-08-07 01:21:19

Assigner apple

CVSS score not scored

State PUBLISHED

Description

Multiple directory traversal vulnerabilities in the (a) Local Storage and (b) Web SQL database implementations in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allow remote attackers to create arbitrary database files via vectors involving a (1) %2f and .. (dot dot) or (2) %5c and .. (dot dot) in a URL.

← Browse all CVEs View on cve.org ↗