CVE-2010-1386

Published: Aug 19, 2010Modified: Apr 29, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

page/Geolocation.cpp in WebCore in WebKit before r56188 and before 1.2.5 does not properly restrict access to the lastPosition function, which has unspecified impact and remote attack vectors, aka rdar problem 7746357.

Affected (2)

Products: Apple: Webkit

Apple

1 product

Webkit

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Apple Webkit	Up to r56187
Apple Webkit	Version r50173

Related CWEs

CWE-264

References (24)

http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html

Source: product-security@apple.com

http://secunia.com/advisories/41856

Source: product-security@apple.com

Vendor Advisory

http://secunia.com/advisories/43068

Source: product-security@apple.com

Vendor Advisory

http://security-tracker.debian.org/tracker/CVE-2010-1386

Source: product-security@apple.com

http://trac.webkit.org/changeset/56188

Source: product-security@apple.com

http://www.mandriva.com/security/advisories?name=MDVSA-2011:039

Source: product-security@apple.com

http://www.securityfocus.com/bid/42500

Source: product-security@apple.com

http://www.ubuntu.com/usn/USN-1006-1

Source: product-security@apple.com

http://www.vupen.com/english/advisories/2010/2722

Source: product-security@apple.com

Vendor Advisory

http://www.vupen.com/english/advisories/2011/0212

Source: product-security@apple.com

Vendor Advisory

http://www.vupen.com/english/advisories/2011/0552

Source: product-security@apple.com

Vendor Advisory

https://bugs.webkit.org/show_bug.cgi?id=36255

Source: product-security@apple.com

http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html