CVE-2010-2441

Published: Jun 24, 2010Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

WebKit does not properly restrict focus changes, which allows remote attackers to read keystrokes via "cross-domain IFRAME gadgets," a different vulnerability than CVE-2010-1126, CVE-2010-1422, and CVE-2010-2295.

Affected (1)

Products: Apple: Webkit

Apple

1 product

Webkit

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Apple Webkit	All versions

Related CWEs

CWE-264

References (10)

http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html

Source: cve@mitre.org

http://secunia.com/advisories/43068

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2011/0212

Source: cve@mitre.org

https://bugzilla.mozilla.org/show_bug.cgi?id=552255

Source: cve@mitre.org

ExploitPatch

http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html