CVE-2010-1386: Critical severity webkit vulnerability
Published Aug 19, 2010
·Updated
page/Geolocation.cpp in WebCore in WebKit before r56188 and before 1.2.5 does not properly restrict access to the lastPosition function, which has unspecified impact and remote attack vectors, aka rdar problem 7746357.
Affected Software
2 affected components
Apple WebKit=r50173
Apple WebKit<=r56187
Event History
Aug 19, 2010
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-1386?
CVE-2010-1386 has an unspecified severity level that may allow remote attacks due to access misconfigurations.
2
How do I fix CVE-2010-1386?
To fix CVE-2010-1386, update WebKit to version 1.2.5 or later to ensure proper access restrictions.
3
What versions of WebKit are affected by CVE-2010-1386?
CVE-2010-1386 affects WebKit versions prior to r56188 and all versions before 1.2.5.
4
What kind of impact can CVE-2010-1386 have?
CVE-2010-1386 can lead to unspecified impacts potentially allowing unauthorized access through the lastPosition function.
5
Is there an exploit for CVE-2010-1386?
CVE-2010-1386 has remote attack vectors, indicating that it may be exploitable under certain conditions.