CVE-2010-0651: Infoleak
WebKit before r52784, as used in Google Chrome before 4.0.249.78 and Apple Safari before 4.0.5, permits cross-origin loading of CSS stylesheets even when the stylesheet download has an incorrect MIME type and the stylesheet document is malformed, which allows remote attackers to obtain sensitive information via a crafted document.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2010-0651?
CVE-2010-0651 is classified as a medium severity vulnerability due to the potential for cross-origin attacks.
How do I fix CVE-2010-0651?
To fix CVE-2010-0651, users should update Google Chrome to version 4.0.249.78 or later and Apple Safari to version 4.0.5 or later.
What types of software are affected by CVE-2010-0651?
CVE-2010-0651 affects Apple WebKit, Google Chrome before version 4.0.249.78, and Apple Safari before version 4.0.5.
What are the potential risks associated with CVE-2010-0651?
The risks of CVE-2010-0651 include unauthorized access to sensitive information via cross-origin CSS loading.
Is CVE-2010-0651 still a risk today?
While CVE-2010-0651 is an older vulnerability, it is essential to ensure that all affected software is updated to mitigate risk.