Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
4.3
CVSSv2

CVE-2010-3259

Published: 07/09/2010 Updated: 04/08/2020
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Subscribe to Chrome

Vulnerability Summary

WebKit, as used in Apple Safari prior to 4.1.3 and 5.0.x prior to 5.0.3, Google Chrome prior to 6.0.472.53, and webkitgtk prior to 1.2.6, does not properly restrict read access to images derived from CANVAS elements, which allows remote malicious users to bypass the Same Origin Policy and obtain potentially sensitive image data via a crafted web site.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

google chrome

webkitgtk webkitgtk

apple safari

apple iphone os

canonical ubuntu linux 9.10

canonical ubuntu linux 10.04

canonical ubuntu linux 10.10

Vendor Advisories

Debian CVElist Bug Report Logs: Multiple security issues
Debian Bug report logs - #599830 Multiple security issues Package: webkit; Maintainer for webkit is (unknown); Reported by: Moritz Muehlenhoff <jmm@debianorg> Date: Mon, 11 Oct 2010 17:51:09 UTC Severity: grave Tags: security Fixed in version 125-1 Done: Gustavo Noronha Silva <kov@debianorg> Bug is archived N ...

References

CWE-200http://googlechromereleases.blogspot.com/2010/09/stable-and-beta-channel-updates.htmlhttp://code.google.com/p/chromium/issues/detail?id=53001http://www.vupen.com/english/advisories/2010/2722http://secunia.com/advisories/41856http://www.ubuntu.com/usn/USN-1006-1http://lists.apple.com/archives/security-announce/2010//Nov/msg00002.htmlhttp://support.apple.com/kb/HT4455http://support.apple.com/kb/HT4456http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.htmlhttp://www.vupen.com/english/advisories/2010/3046http://secunia.com/advisories/42314http://www.securityfocus.com/bid/44206http://www.vupen.com/english/advisories/2011/0216http://www.vupen.com/english/advisories/2011/0212http://secunia.com/advisories/43068http://secunia.com/advisories/43086http://www.redhat.com/support/errata/RHSA-2011-0177.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.htmlhttp://www.mandriva.com/security/advisories?name=MDVSA-2011:039http://www.vupen.com/english/advisories/2011/0552https://technet.microsoft.com/library/security/msvr11-002https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11221https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=599830https://nvd.nist.gov
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322CVE-2006-4304wirelessCVE-2023-23022local file inclusionCVE-2024-27058CVE-2024-33820open redirectCVE-2024-27079
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook