CVE-2010-1390: XSS
Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to inject arbitrary web script or HTML via vectors related to improper UTF-7 canonicalization, and lack of termination of a quoted string in an HTML document.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-1390?
CVE-2010-1390 is classified as a moderate severity vulnerability due to its potential for cross-site scripting (XSS) attacks.
How do I fix CVE-2010-1390?
To fix CVE-2010-1390, users should update their Apple Safari browser to version 5.0 or later.
Which versions of Safari are affected by CVE-2010-1390?
CVE-2010-1390 affects Apple Safari versions before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and versions before 4.1 on Mac OS X 10.4.
What type of vulnerability is CVE-2010-1390?
CVE-2010-1390 is a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web scripts or HTML.
What can be exploited through CVE-2010-1390?
CVE-2010-1390 can be exploited through improper UTF-7 canonicalization and lack of termination, potentially leading to user data theft.