page/Geolocation.cpp in WebCore in WebKit before r56188 and prior to 1.2.5 does not properly restrict access to the lastPosition function, which has unspecified impact and remote attack vectors, aka rdar problem 7746357.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
apple webkit |
||
apple webkit r50173 |