CVE-2010-3804: Medium severity safari vulnerability

Q: What is the severity of CVE-2010-3804?

CVE-2010-3804 is classified as a moderate severity vulnerability due to the potential for user tracking via predictable random number generation in web applications.

Q: How do I fix CVE-2010-3804?

To fix CVE-2010-3804, update to Apple Safari version 5.0.3 or later.

Q: What versions of Safari are affected by CVE-2010-3804?

CVE-2010-3804 affects Apple Safari versions prior to 5.0.3 on Mac OS X and 4.1.3 on earlier versions.

Q: Can CVE-2010-3804 be exploited remotely?

Yes, CVE-2010-3804 can be exploited remotely by attackers to potentially track users.

Q: Is the WebKit implementation in CVE-2010-3804 vulnerable?

The specific WebKit implementation related to CVE-2010-3804 is considered vulnerable in the context of the Safari versions mentioned.

Published Nov 20, 2010

Updated

The JavaScript implementation in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, uses a weak algorithm for generating values of random numbers, which makes it easier for remote attackers to track a user by predicting a value, a related issue to CVE-2008-5913 and CVE-2010-3171.

Affected Software

126 affected components

apple Safari<=5.0.2

apple Safari=5.0

apple Safari=5.0.1

Apple WebKit

Apple iOS and macOS=10.5

Apple iOS and macOS=10.5.0

Apple iOS and macOS=10.5.1

Apple iOS and macOS=10.5.2

Apple iOS and macOS=10.5.3

Apple iOS and macOS=10.5.4

Apple iOS and macOS=10.5.5

Apple iOS and macOS=10.5.6

Apple iOS and macOS=10.5.7

Apple iOS and macOS=10.5.8

Apple iOS and macOS=10.6.0

Apple iOS and macOS=10.6.1

Apple iOS and macOS=10.6.2

Apple iOS and macOS=10.6.3

Apple iOS and macOS=10.6.4

Apple iOS and macOS=10.6.5

Apple Mac OS X Server=10.5

Apple Mac OS X Server=10.5.0

Apple Mac OS X Server=10.5.1

Apple Mac OS X Server=10.5.2

Apple Mac OS X Server=10.5.3

Apple Mac OS X Server=10.5.4

Apple Mac OS X Server=10.5.5

Apple Mac OS X Server=10.5.6

Apple Mac OS X Server=10.5.7

Apple Mac OS X Server=10.5.8

Apple Mac OS X Server=10.6.0

Apple Mac OS X Server=10.6.1

Apple Mac OS X Server=10.6.2

Apple Mac OS X Server=10.6.3

Apple Mac OS X Server=10.6.4

Apple Mac OS X Server=10.6.5

Microsoft Windows 7

Microsoft Windows Vista

Microsoft Windows XP=sp2

apple Safari<=4.1.2

apple Safari=1.0

apple Safari=1.0-beta

apple Safari=1.0-beta2

apple Safari=1.0.0

apple Safari=1.0.0b1

apple Safari=1.0.0b2

apple Safari=1.0.1

apple Safari=1.0.2

apple Safari=1.0.3

apple Safari=1.0.3-85.8

apple Safari=1.0.3-85.8.1

apple Safari=1.1

apple Safari=1.1.0

apple Safari=1.1.1

apple Safari=1.2

apple Safari=1.2.0

apple Safari=1.2.1

apple Safari=1.2.2

apple Safari=1.2.3

apple Safari=1.2.4

apple Safari=1.2.5

apple Safari=1.3

apple Safari=1.3.0

apple Safari=1.3.1

apple Safari=1.3.2

apple Safari=1.3.2-312.5

apple Safari=1.3.2-312.6

apple Safari=2

apple Safari=2.0

apple Safari=2.0.0

apple Safari=2.0.1

apple Safari=2.0.2

apple Safari=2.0.3

apple Safari=2.0.3-417.8

apple Safari=2.0.3-417.9

apple Safari=2.0.3-417.9.2

apple Safari=2.0.3-417.9.3

apple Safari=2.0.4

apple Safari=3

apple Safari=3.0

apple Safari=3.0.0

apple Safari=3.0.0b

apple Safari=3.0.1

apple Safari=3.0.1b

apple Safari=3.0.2

apple Safari=3.0.2b

apple Safari=3.0.3

apple Safari=3.0.3b

apple Safari=3.0.4

apple Safari=3.0.4b

apple Safari=3.1.0

apple Safari=3.1.0b

apple Safari=3.1.1

apple Safari=3.1.2

apple Safari=3.2.0

apple Safari=3.2.1

apple Safari=3.2.2

apple Safari=4.1

apple Safari=4.1.1

Apple WebKit

Apple iOS and macOS=10.4

Apple iOS and macOS=10.4.0

Apple iOS and macOS=10.4.1

Apple iOS and macOS=10.4.2

Apple iOS and macOS=10.4.3

Apple iOS and macOS=10.4.4

Apple iOS and macOS=10.4.5

Apple iOS and macOS=10.4.6

Apple iOS and macOS=10.4.7

Apple iOS and macOS=10.4.8

Apple iOS and macOS=10.4.9

Apple iOS and macOS=10.4.10

Apple iOS and macOS=10.4.11

Apple Mac OS X Server=10.4

Apple Mac OS X Server=10.4.0

Apple Mac OS X Server=10.4.1

Apple Mac OS X Server=10.4.2

Apple Mac OS X Server=10.4.3

Apple Mac OS X Server=10.4.4

Apple Mac OS X Server=10.4.5

Apple Mac OS X Server=10.4.6

Apple Mac OS X Server=10.4.7

Apple Mac OS X Server=10.4.8

Apple Mac OS X Server=10.4.9

Apple Mac OS X Server=10.4.10

Apple Mac OS X Server=10.4.11

Remediation

Patch Available

http://support.apple.com/kb/HT4455

Event History

Nov 20, 2010

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Nov 22, 2010

Data Sourced

01:00 PM

DescriptionWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2010-3804?

CVE-2010-3804 is classified as a moderate severity vulnerability due to the potential for user tracking via predictable random number generation in web applications.

How do I fix CVE-2010-3804?