CVE-2010-1236
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2010-1236
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The protocolIs function in platform/KURLGoogle.cpp in WebCore in WebKit before r55822, as used in Google Chrome before 4.1.249.1036 and Flock Browser 3.x before 3.0.0.4112, does not properly handle whitespace at the beginning of a URL, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted javascript: URL, as demonstrated by a \x00javascript:alert sequence.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Google Chrome WebKit跨站脚本攻击漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
WebKit是KDE、苹果（Apple）、谷歌（Google）等公司共同开发的一套开源Web浏览器引擎，目前被Apple Safari及Google Chrome等浏览器使用。 Google Chrome 4.1.249.1036之前版本和Flock Browser 3.0.0.4112之前的3.x版本中使用的WebKit r55822之前版本的WebCore的platform/KURLGoogle.cpp中的protocolIs函数没有正确处理URL开端的空白。远程攻击者可借助特制的javascript
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2010-1236
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2010-1236
请登录查看更多情报信息。
- http://googlechromereleases.blogspot.com/2010/03/stable-channel-update.htmlx_refsource_CONFIRM
- http://code.google.com/p/chromium/issues/detail?id=37383x_refsource_CONFIRM
- http://codereview.chromium.org/858001x_refsource_CONFIRM
- https://bugs.webkit.org/show_bug.cgi?id=35948x_refsource_CONFIRM
- http://src.chromium.org/viewvc/chrome?view=rev&revision=41244x_refsource_CONFIRM
- http://flock.com/security/x_refsource_CONFIRM
- http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.htmlvendor-advisoryx_refsource_SUSE
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14067vdb-entrysignaturex_refsource_OVAL
- https://nvd.nist.gov/vuln/detail/CVE-2010-1236
Same Patch Batch · n/a · 2010-04-01 · 48 CVEs total
| CVE-2010-0837 | Oracle Java SE 和Business Java 组件'Pack200'未明安全漏洞 | |
| CVE-2010-0840 | Oracle Java SE和Java for Business Java运行时环境漏洞 | |
| CVE-2010-0842 | Oracle Java SE和Java for Business Sound组件未明安全漏洞 | |
| CVE-2010-0846 | Oracle Java SE和Java for Business ImageIO组件未明安全漏洞 | |
| CVE-2010-0847 | Oracle Java SE 和Business Java 组件'Java 2D'未明安全漏洞 | |
| CVE-2010-0848 | Oracle Java SE 和Business Java 组建'Java 2D'未明安全漏洞 | |
| CVE-2010-0849 | Oracle Java SE和Java for Business Java 2D组件未明安全漏洞 | |
| CVE-2010-0850 | Oracle Java SE 和Business Java平台Java 2D 组件未明漏洞 | |
| CVE-2010-0845 | Oracle Java SE 和Business Java 组件'HotSpot Server'未明安全漏洞 | |
| CVE-2010-0838 | Oracle Java SE和Java for Business Java 2D组件未明安全漏洞 | |
| CVE-2010-0839 | Oracle Java SE 和Business Java 组件'Sound'未明安全漏洞 | |
| CVE-2010-0095 | Oracle Java SE 和Business Java 组件'Java Runtime Environment'未明安全漏洞 | |
| CVE-2010-0094 | Oracle Java SE和Java for Business Java运行时环境漏洞 | |
| CVE-2010-0093 | Oracle Java SE 和Business Java 组件'Java Runtime Environment'未明安全漏洞 | |
| CVE-2010-0092 | Oracle Java SE和Java for Business JAVA运行时环境漏洞 | |
| CVE-2010-0091 | Oracle Java SE 和Business Java 组件'Java Runtime Environment'未明安全漏洞 | |
| CVE-2010-0090 | Oracle Java SE和Java for Business JAVA运行时环境漏洞 | |
| CVE-2010-0089 | Oracle Java SE 和Business Java 组件'Java Web Start, Java Plug-in'未明安全漏洞 | |
| CVE-2010-0088 | Oracle Java SE 和Business Java 组件'Java Runtime Environment'未明安全漏洞 | |
| CVE-2010-0087 | Oracle Java SE 和Business Java 组件'Java Web Start, Java Plug-in'未明安全漏洞 |
Showing top 20 of 48 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2010-1236
No comments yet