| Vulnerability Name: | CVE-2010-0651 (CCN-55879) | ||||||||||||
| Assigned: | 2010-01-25 | ||||||||||||
| Published: | 2010-01-25 | ||||||||||||
| Updated: | 2017-09-19 | ||||||||||||
| Summary: | WebKit before r52784, as used in Google Chrome before 4.0.249.78 and Apple Safari before 4.0.5, permits cross-origin loading of CSS stylesheets even when the stylesheet download has an incorrect MIME type and the stylesheet document is malformed, which allows remote attackers to obtain sensitive information via a crafted document. | ||||||||||||
| CVSS v3 Severity: | 5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
| ||||||||||||
| CVSS v2 Severity: | 4.3 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N) 3.2 Low (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N/E:U/RL:OF/RC:C)
3.2 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N/E:U/RL:OF/RC:C)
| ||||||||||||
| Vulnerability Type: | CWE-200 | ||||||||||||
| Vulnerability Consequences: | Obtain Information | ||||||||||||
| References: | Source: CONFIRM Type: Third Party Advisory http://code.google.com/p/chromium/issues/detail?id=9877 Source: MITRE Type: CNA CVE-2010-0651 Source: CCN Type: Google Chrome Releases Stable Channel Update Source: CONFIRM Type: Patch, Third Party Advisory http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html Source: SUSE Type: Third Party Advisory SUSE-SR:2011:002 Source: MISC Type: Third Party Advisory http://scarybeastsecurity.blogspot.com/2009/12/generic-cross-browser-cross-domain.html Source: CCN Type: SA37769 Google Chrome Multiple Vulnerabilities Source: SECUNIA Type: Permissions Required 41856 Source: SECUNIA Type: Permissions Required 43068 Source: CCN Type: SECTRACK ID: 1023506 Google Chrome Bugs Let Remote Users Execute Arbitrary Code, Deny Service, and Obtain Information. Source: SECTRACK Type: Third Party Advisory, VDB Entry 1023506 Source: CONFIRM Type: Third Party Advisory http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs Source: CONFIRM Type: Vendor Advisory http://trac.webkit.org/changeset/52784 Source: MISC Type: Third Party Advisory http://websec.sv.cmu.edu/css/css.pdf Source: MANDRIVA Type: Third Party Advisory MDVSA-2011:039 Source: CCN Type: OSVDB ID: 62307 Google Chrome WebKit CSS Stylesheet Cross-origin Information Disclosure Source: CCN Type: OSVDB ID: 62944 Apple Safari WebKit CSS Stylesheet Cross-origin Information Disclosure Source: CCN Type: BID-37948 Google Chrome prior to 4.0.249.78 Multiple Security Vulnerabilities Source: UBUNTU Type: Third Party Advisory USN-1006-1 Source: VUPEN Type: Third Party Advisory ADV-2010-2722 Source: VUPEN Type: Third Party Advisory ADV-2011-0212 Source: VUPEN Type: Third Party Advisory ADV-2011-0552 Source: CONFIRM Type: Vendor Advisory https://bugs.webkit.org/show_bug.cgi?id=29820 Source: XF Type: UNKNOWN googlechrome-stylesheets-info-disclosure(55879) Source: OVAL Type: UNKNOWN oval:org.mitre.oval:def:13653 Source: SUSE Type: SUSE-SR:2011:002 SUSE Security Summary Report | ||||||||||||
| Vulnerable Configuration: | Configuration 1: Configuration 2: Configuration 3: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||||||
| Oval Definitions | |||||||||||||
| |||||||||||||
| BACK | |||||||||||||