CVE-2010-1373: XSS
Published Jun 17, 2010
·Updated
Cross-site scripting (XSS) vulnerability in Help Viewer in Apple Mac OS X 10.6 before 10.6.4 allows remote attackers to inject arbitrary web script or HTML via a crafted help: URL, related to "URL parameters in HTML content."
Affected Software
8 affected components
Apple Mac OS X Server=10.6.3
Apple iOS and macOS=10.6.3
Apple Mac OS X Server=10.6.1
Apple Mac OS X Server=10.6.2
Apple iOS and macOS=10.6.1
Apple Mac OS X Server=10.6.0
Apple iOS and macOS=10.6.0
Apple iOS and macOS=10.6.2
Remediation
Patch Available
Patch Available
Patch Available
Event History
Jun 17, 2010
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-1373?
CVE-2010-1373 is considered a medium severity vulnerability due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2010-1373?
To fix CVE-2010-1373, users should upgrade to Mac OS X 10.6.4 or later versions.
3
What software versions are affected by CVE-2010-1373?
CVE-2010-1373 affects Apple Mac OS X versions 10.6.0 to 10.6.3.
4
Can exploiting CVE-2010-1373 lead to unauthorized access?
Yes, exploiting CVE-2010-1373 can allow attackers to inject arbitrary web scripts, potentially leading to unauthorized actions or access.
5
What type of vulnerability is CVE-2010-1373?
CVE-2010-1373 is a cross-site scripting (XSS) vulnerability.