CVE-2010-1383: Critical severity cfnetwork vulnerability
Published Jul 21, 2011
·Updated
CFNetwork in Apple Safari before 5.0.6 on Windows allows remote web servers to execute arbitrary code by replaying the NTLM credentials of a client user, related to a "credential reflection" issue.
Affected Software
71 affected components
Apple CFNetwork
Apple Safari<=5.0.5
Apple Safari=1.0
Apple Safari=1.0-beta
Apple Safari=1.0-beta2
Apple Safari=1.0.0
Apple Safari=1.0.0b1
Apple Safari=1.0.0b2
Apple Safari=1.0.1
Apple Safari=1.0.2
Apple Safari=1.0.3
Apple Safari=1.0.3-85.8
Apple Safari=1.0.3-85.8.1
Apple Safari=1.1
Apple Safari=1.1.0
Apple Safari=1.1.1
Apple Safari=1.2
Apple Safari=1.2.0
Apple Safari=1.2.1
Apple Safari=1.2.2
Apple Safari=1.2.3
Apple Safari=1.2.4
Apple Safari=1.2.5
Apple Safari=1.3
Apple Safari=1.3.0
Apple Safari=1.3.1
Apple Safari=1.3.2
Apple Safari=1.3.2-312.5
Apple Safari=1.3.2-312.6
Apple Safari=2
Apple Safari=2.0
Apple Safari=2.0.0
Apple Safari=2.0.1
Apple Safari=2.0.2
Apple Safari=2.0.3
Apple Safari=2.0.3-417.8
Apple Safari=2.0.3-417.9
Apple Safari=2.0.3-417.9.2
Apple Safari=2.0.3-417.9.3
Apple Safari=2.0.4
Apple Safari=3
Apple Safari=3.0
Apple Safari=3.0.0
Apple Safari=3.0.0b
Apple Safari=3.0.1
Apple Safari=3.0.1b
Apple Safari=3.0.2
Apple Safari=3.0.2b
Apple Safari=3.0.3
Apple Safari=3.0.3b
Apple Safari=3.0.4
Apple Safari=3.0.4b
Apple Safari=3.1.0
Apple Safari=3.1.0b
Apple Safari=3.1.1
Apple Safari=3.1.2
Apple Safari=3.2.0
Apple Safari=3.2.1
Apple Safari=3.2.2
Apple Safari=4.1
Apple Safari=4.1.1
Apple Safari=4.1.2
Apple Safari=5.0
Apple Safari=5.0.1
Apple Safari=5.0.2
Apple Safari=5.0.3
Apple Safari=5.0.4
Microsoft Windows 7
Microsoft Windows Vista
Microsoft Windows XP=sp2
Microsoft Windows XP=sp3
Remediation
Event History
Jul 21, 2011
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Data Sourced
11:55 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-1383?
CVE-2010-1383 has been classified as a critical severity vulnerability due to its ability to allow arbitrary code execution.
2
How do I fix CVE-2010-1383?
To fix CVE-2010-1383, upgrade to Apple Safari version 5.0.6 or later.
3
What types of systems are affected by CVE-2010-1383?
CVE-2010-1383 affects Apple Safari versions prior to 5.0.6 on Windows.
4
What is the nature of the vulnerability in CVE-2010-1383?
The vulnerability involves a credential reflection issue in CFNetwork that can lead to remote code execution.
5
Can I still use Apple Safari if it is affected by CVE-2010-1383?
Using an affected version of Apple Safari increases the risk of exploitation and is not recommended until updated.