CVE-2010-3813

webkit: HTMLLinkElement ignores dnsPrefetchingEnabled setting

Published Nov 20, 2010 CVSS 2.0 · 5.8 Medium EPSS 2.1% KEV · Not listed
Description
The WebCore::HTMLLinkElement::process function in WebCore/html/HTMLLinkElement.cpp in WebKit, as used in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4; webkitgtk before 1.2.6; and possibly other products does not verify whether DNS prefetching is enabled when processing an HTML LINK element, which allows remote attackers to bypass intended access restrictions, as demonstrated by an HTML e-mail message that uses a LINK element for X-Confirm-Reading-To functionality.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2010-3792 The WebCore::HTMLLinkElement::process function in WebCore/html/HTMLLinkElement.cpp in WebKit, as used in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4; webkitgtk before 1.2.6; and possibly other products does not verify whether DNS prefetching is enabled when processing an HTML LINK element, which allows remote attackers to bypass intended access restrictions, as demonstrated by an HTML e-mail message that uses a LINK element for X-Confirm-Reading-To functionality.
Ubuntu USN Ubuntu USN USN-1195-1 WebKit vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
apple
Published
Updated
Aug 7, 2024, 3:26 AM
Reserved
Oct 7, 2010, 12:00 AM
Status
Modified
Published
Nov 22, 2010, 1:00 PM
Modified
Jun 16, 2026, 11:23 PM
Severity
Moderate
Public date
Nov 18, 2010, 12:00 AM