Launchpad.net

Launchpad Home
Code
Bugs
Blueprints
Translations
Answers

CVE 2010-1407

WebKit in Apple iOS before 4 on the iPhone and iPod touch does not properly implement the history.replaceState method in certain situations involving IFRAME elements, which allows remote attackers to obtain sensitive information via a crafted HTML document.

Related bugs and status

CVE-2010-1407 (Candidate) is related to these bugs:

Bug #660075: webkit 1.2.5 security update tracking bug

		In	Importance	Status
660075	webkit 1.2.5 security update tracking bug	webkit (Ubuntu)	Undecided	Fix Released
660075	webkit 1.2.5 security update tracking bug	webkit (Ubuntu Karmic)	Medium	Fix Released
660075	webkit 1.2.5 security update tracking bug	webkit (Ubuntu Lucid)	Medium	Fix Released
660075	webkit 1.2.5 security update tracking bug	webkit (Ubuntu Maverick)	Medium	Fix Released

See the

CVE page on Mitre.org for more details.

References

CONFIRM: http://support.apple.c...
APPLE: APPLE-SA-2010-06-21-1
BID: 41016
UBUNTU: USN-1006-1
SECUNIA: 41856
VUPEN: ADV-2010-2722
CONFIRM: http://support.apple.c...
APPLE: APPLE-SA-2010-11-22-1
SECUNIA: 42314
SUSE: SUSE-SR:2011:002
SECUNIA: 43068
VUPEN: ADV-2011-0212
MANDRIVA: MDVSA-2011:039
VUPEN: ADV-2011-0552
XF: appleios-historyreplac...