CVE Reference: CVE-2010-1760

NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2010-1760

Description:
loader/DocumentThreadableLoader.cpp in the XMLHttpRequest implementation in WebCore in WebKit before r58409 does not properly handle credentials during a cross-origin synchronous request, which has unspecified impact and remote attack vectors, aka rdar problem 7905150.

CVE Status:
Candidate

References:

UBUNTU
  http://www.ubuntu.com/usn/USN-1006-1

SUSE
  http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html

SAID
  Secunia Advisory: SA41856
  Secunia Advisory: SA43068

MANDRIVA
  http://www.mandriva.com/security/advisories?name=MDVSA-2011:039

CONFIRM
  http://trac.webkit.org/changeset/58409
  http://security-tracker.debian.org/tracker/CVE-2010-1760

BID
  42494


Return to the previous page.