VDB
CVE-2010-2264
CVE-2010-2264
PUBLISHED
CVSS 4.300000190734863 MEDIUM
The Cascading Style Sheets (CSS) implementation in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document.
EPSS 2.60% · 84.8th percentile
Risk Scores
CVSS 2.0
4.300000190734863
EPSS Score
2.60%
84.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| apple | safari | 0, 4.0, 4.0.2 |
| n/a | n/a | n/a |
| apple | webkit |
Timeline
- Jun 11, 2010 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Jul 13, 2022 EPSS Score
- Sep 5, 2022 EPSS Score
- Oct 27, 2022 EPSS Score
- Dec 19, 2022 EPSS Score
- Feb 10, 2023 EPSS Score
- Apr 4, 2023 EPSS Score
- May 27, 2023 EPSS Score
- Jul 19, 2023 EPSS Score
References
- ADV-2010-2722 vdb
- 41856 third-party-advisory
- ADV-2010-1373 vdb
- 40756 vdb
- APPLE-SA-2010-06-07-1 vendor-advisory
- ADV-2011-0552 vdb
- https://nvd.nist.gov/vuln/detail/CVE-2010-2264 advisory
- http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html url
- http://securitytracker.com/id?1024067 url
- http://www.ubuntu.com/usn/USN-1006-1 url
- http://secunia.com/advisories/43068 technical
- http://support.apple.com/kb/HT4196 advisory
- http://www.vupen.com/english/advisories/2011/0212 technical
- http://secunia.com/advisories/40105 advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:039 technical
- http://www.securityfocus.com/bid/40620 patch