Beveiligingsadvies

CVE-2010-1391

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2010-06-11 17:28:00
Laatst bijgewerkt 2024-08-07 01:21:19
Toegewezen door apple
CVSS-score geen score
Status PUBLISHED

Beschrijving

Multiple directory traversal vulnerabilities in the (a) Local Storage and (b) Web SQL database implementations in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allow remote attackers to create arbitrary database files via vectors involving a (1) %2f and .. (dot dot) or (2) %5c and .. (dot dot) in a URL.