CVE-2010-1391: Path Traversal
Multiple directory traversal vulnerabilities in the (a) Local Storage and (b) Web SQL database implementations in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allow remote attackers to create arbitrary database files via vectors involving a (1) %2f and .. (dot dot) or (2) %5c and .. (dot dot) in a URL.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-1391?
CVE-2010-1391 is classified as a high severity vulnerability due to the potential for remote attackers to exploit directory traversal issues.
How do I fix CVE-2010-1391?
To address CVE-2010-1391, update to the latest version of Apple Safari that is not affected, specifically Safari version 5.0 or higher.
What systems are affected by CVE-2010-1391?
CVE-2010-1391 affects multiple versions of Apple Safari prior to 5.0 on Mac OS X and Windows systems.
What kind of attacks can exploit CVE-2010-1391?
Attackers can exploit CVE-2010-1391 to create arbitrary database files through directory traversal vulnerabilities in WebKit.
Is CVE-2010-1391 still a risk for users today?
CVE-2010-1391 poses no risk to users who have updated to Safari 5.0 or later, as it was addressed in subsequent releases.