CVE-2010-5070
First published: Wed Dec 07 2011(Updated: )
The JavaScript implementation in Apple Safari 4 does not properly restrict the set of values contained in the object returned by the getComputedStyle method, which allows remote attackers to obtain sensitive information about visited web pages by calling this method, a different vulnerability than CVE-2010-2264. NOTE: this may overlap CVE-2010-5073.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apple Safari | =4.0.2 | |
| Apple Safari | =4.0.1 | |
| Apple Safari | =4.1.3 | |
| Apple Safari | =4.0.5 | |
| Apple Safari | =4.0-beta | |
| Apple Safari | =4.0.3 | |
| Apple Safari | =4.1.1 | |
| Apple Safari | =4.1 | |
| Apple Safari | =4.0 | |
| Apple Safari | =4.0.0b | |
| Apple Safari | =4.0.4 | |
| Apple Safari | =4.1.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2010-5070?
CVE-2010-5070 is classified as a medium severity vulnerability due to its potential for sensitive information disclosure.
How do I fix CVE-2010-5070?
To fix CVE-2010-5070, users should update their Apple Safari browser to the latest version that addresses this vulnerability.
What type of vulnerability is CVE-2010-5070?
CVE-2010-5070 is a vulnerability that allows remote attackers to access sensitive information through improper restrictions in the getComputedStyle method.
Which versions of Safari are affected by CVE-2010-5070?
CVE-2010-5070 affects multiple versions of Apple Safari, including versions 4.0.0b, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.5, 4.1, 4.1.1, 4.1.2, and 4.1.3.
What impact does CVE-2010-5070 have on users?
The impact of CVE-2010-5070 allows attackers to potentially retrieve sensitive data about websites that a user has visited.
- collector/nvd-historical
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/author
- agent/references
- agent/severity
- agent/weakness
- agent/tags
- agent/event
- agent/description
- agent/first-publish-date
- agent/source
- vendor/apple
- canonical/apple safari
- version/apple safari/4.0.2
- version/apple safari/4.0.1
- version/apple safari/4.1.3
- version/apple safari/4.0.5
- version/apple safari/4.0-beta
- version/apple safari/4.0.3
- version/apple safari/4.1.1
- version/apple safari/4.1
- version/apple safari/4.0
- version/apple safari/4.0.0b
- version/apple safari/4.0.4
- version/apple safari/4.1.2