Lucene search

MitreCVE-2010-0650

HistoryFeb 18, 2010 - 6:00 p.m.

CVE-2010-0650

2010-02-1818:00:00

CWE-264

mitre

web.nvd.nist.gov

cve-2010-0650

webkit

google chrome

apple safari

security bypass

popup windows

mouse click event

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

AI Score

8.2

Confidence

High

EPSS

0.002

Percentile

58.7%

JSON

WebKit, as used in Google Chrome before 4.0.249.78 and Apple Safari, allows remote attackers to bypass intended restrictions on popup windows via crafted use of a mouse click event.

Affected configurations

Nvd

Node

googlechromeRange<4.0.249.78

Node

applesafariMatch-

Node

canonicalubuntu_linuxMatch9.10

canonicalubuntu_linuxMatch10.04lts

canonicalubuntu_linuxMatch10.10

VendorProductVersionCPE
googlechrome*cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
applesafari-cpe:2.3:a:apple:safari:-:*:*:*:*:*:*:*
canonicalubuntu_linux9.10cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*
canonicalubuntu_linux10.04cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:*
canonicalubuntu_linux10.10cpe:2.3:o:canonical:ubuntu_linux:10.10:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
google	chrome	*	cpe:2.3:a:google:chrome::::::::
apple	safari	-	cpe:2.3:a:apple:safari:-:::::::*
canonical	ubuntu_linux	9.10	cpe:2.3:o:canonical:ubuntu_linux:9.10:::::::*
canonical	ubuntu_linux	10.04	cpe:2.3:o:canonical:ubuntu_linux:10.04::::lts:::
canonical	ubuntu_linux	10.10	cpe:2.3:o:canonical:ubuntu_linux:10.10:::::::*

References

code.google.com/p/chromium/issues/detail?id=3275

googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html

lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html

secunia.com/advisories/41856

secunia.com/advisories/43068

securitytracker.com/id?1023506

sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs

www.mandriva.com/security/advisories?name=MDVSA-2011:039

www.securityfocus.com/bid/38373

www.ubuntu.com/usn/USN-1006-1

www.vupen.com/english/advisories/2010/2722

www.vupen.com/english/advisories/2011/0212

www.vupen.com/english/advisories/2011/0552

bugs.webkit.org/show_bug.cgi?id=21501

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13791

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

AI Score

8.2

Confidence

High

EPSS

0.002

Percentile

58.7%

JSON

Related for CVE-2010-0650