Lucene search

K
ubuntucveUbuntu.comUB:CVE-2010-0661
HistoryFeb 18, 2010 - 12:00 a.m.

CVE-2010-0661

2010-02-1800:00:00
ubuntu.com
ubuntu.com
15

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.01

Percentile

83.7%

WebCore/bindings/v8/custom/V8DOMWindowCustom.cpp in WebKit before r52401,
as used in Google Chrome before 4.0.249.78, allows remote attackers to
bypass the Same Origin Policy via vectors involving the window.open method.

Bugs

Notes

Author Note
jdstrand qt4-x11 unmaintained upstream (see README.webkit for details) webkit is a fork of khtml from kdelibs. kdelibs5 is farther from it, while qt4-x11 attempts to unify khtml and webkit.
mdeslaur webkitkde is a wrapper around qt4-x11’s webkit. code not present in gtk webkit

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.01

Percentile

83.7%