CVE-2010-1126

Published: Mar 26, 2010Modified: Apr 29, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

The JavaScript implementation in WebKit allows remote attackers to send selected keystrokes to a form field in a hidden frame, instead of the intended form field in a visible frame, via certain calls to the focus method.

Affected (1)

Products: Apple: Webkit

Apple

1 product

Webkit

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Apple Webkit	All versions

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (10)

http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html

Source: cve@mitre.org

http://secunia.com/advisories/43068

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/510070/100/0/threaded

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2011/0212

Source: cve@mitre.org

https://bugzilla.mozilla.org/show_bug.cgi?id=552255

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html