PT-2010-5094
CVE-2010-3810
·
Publicado
2010-11-20
·
Atualizado
2017-09-19
Descrição por
CVSS 2.0
4.3
MédiaMétricasAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Safari versions prior to 5.0.3 on Mac OS X 10.5 through 10.6 and Windows
Safari versions prior to 4.1.3 on Mac OS X 10.4
Description
The issue allows remote attackers to spoof the location bar's URL or add URLs to the history via a cross-origin attack due to improper handling of the History object.
Recommendations
For Safari versions prior to 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, update to version 5.0.3 or later.
For Safari versions prior to 4.1.3 on Mac OS X 10.4, update to version 4.1.3 or later.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾