CVE-2010-3804

Published Nov 20, 2010 CVSS 2.0 · 5.0 Medium EPSS 9.1% KEV · Not listed
Description
The JavaScript implementation in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, uses a weak algorithm for generating values of random numbers, which makes it easier for remote attackers to track a user by predicting a value, a related issue to CVE-2008-5913 and CVE-2010-3171.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
apple
Published
Updated
Aug 7, 2024, 3:26 AM
Reserved
Oct 7, 2010, 12:00 AM
Status
Modified
Published
Nov 22, 2010, 1:00 PM
Modified
Jun 16, 2026, 11:23 PM