CVE-2010-1384 : Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, does not provide a w

Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, does not provide a warning about a (1) http or (2) https URL that contains a username and password, which makes it easier for remote attackers to conduct phishing attacks via a crafted URL.

Published 2010-06-11 18:00:16

Updated 2017-09-19 01:30:41

Source Apple Inc.

View at NVD, CVE.org

Vulnerability category: Information leak

Exploit prediction scoring system (EPSS) score for CVE-2010-1384

Probability of exploitation activity in the next 30 days: 0.68%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 77 % EPSS Score History EPSS FAQ

CVSS scores for CVE-2010-1384

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.3	MEDIUM	AV:N/AC:M/Au:N/C:P/I:N/A:N	8.6	2.9	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None

CWE ids for CVE-2010-1384

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2010-1384

http://jvn.jp/en/jp/JVN46026251/index.html

JVN#46026251: Safari address bar spoofing vulnerability
http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html

Apple - Lists.apple.com

CVEs referencing this url
http://support.apple.com/kb/HT4456

About the security content of iOS 4.2 - Apple Support

CVEs referencing this url
http://www.securityfocus.com/bid/40620

RETIRED: Apple Safari Prior to 5.0 and 4.1 Multiple Security Vulnerabilities
Patch

CVEs referencing this url
http://securitytracker.com/id?1024067

Apple Safari Bugs Let Remote Users Execute Arbitrary Code or Access Potentially Sensitive Information - SecurityTracker

CVEs referencing this url
http://support.apple.com/kb/HT4225

About the security content of iOS 4 - Apple Support

CVEs referencing this url
http://support.apple.com/kb/HT4196

About the security content of Safari 5.0 and Safari 4.1 - Apple Support
Vendor Advisory

CVEs referencing this url
http://www.vupen.com/english/advisories/2010/1373

Webmail | OVH- OVH
Patch;Vendor Advisory

CVEs referencing this url
http://lists.apple.com/archives/security-announce/2010/Jun/msg00000.html

Apple - Lists.apple.com
Patch;Vendor Advisory

CVEs referencing this url
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6812

Repository / Oval Repository
http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html

Apple - Lists.apple.com

CVEs referencing this url
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001538.html

JVNDB-2010-001538 - JVN iPedia - 脆弱性対策情報データベース

Products affected by CVE-2010-1384

Apple » Safari
Versions up to, including, (<=) 4.0.5
cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
Matching versions
When used together with: Apple » Mac Os X » Version: 10.5
When used together with: Apple » Mac Os X » Version: 10.5.0
When used together with: Apple » Mac Os X » Version: 10.5.1
When used together with: Apple » Mac Os X » Version: 10.5.2
When used together with: Apple » Mac Os X » Version: 10.5.3
When used together with: Apple » Mac Os X » Version: 10.5.4
When used together with: Apple » Mac Os X » Version: 10.5.5
When used together with: Apple » Mac Os X » Version: 10.5.6
When used together with: Apple » Mac Os X » Version: 10.5.7
When used together with: Apple » Mac Os X » Version: 10.5.8
When used together with: Apple » Mac Os X » Version: 10.6.0
When used together with: Apple » Mac Os X » Version: 10.6.1
When used together with: Apple » Mac Os X » Version: 10.6.2
When used together with: Apple » Mac Os X » Version: 10.6.3
When used together with: Apple » Mac Os X Server » Version: 10.5
When used together with: Apple » Mac Os X Server » Version: 10.5.0
When used together with: Apple » Mac Os X Server » Version: 10.5.1
When used together with: Apple » Mac Os X Server » Version: 10.5.2
When used together with: Apple » Mac Os X Server » Version: 10.5.3
When used together with: Apple » Mac Os X Server » Version: 10.5.4
When used together with: Apple » Mac Os X Server » Version: 10.5.5
When used together with: Apple » Mac Os X Server » Version: 10.5.6
When used together with: Apple » Mac Os X Server » Version: 10.5.7
When used together with: Apple » Mac Os X Server » Version: 10.5.8
When used together with: Apple » Mac Os X Server » Version: 10.6.0
When used together with: Apple » Mac Os X Server » Version: 10.6.1
When used together with: Apple » Mac Os X Server » Version: 10.6.2
When used together with: Apple » Mac Os X Server » Version: 10.6.3
When used together with: Microsoft » Windows 7
When used together with: Microsoft » Windows Vista
When used together with: Microsoft » Windows Xp » Update SP2
When used together with: Microsoft » Windows Xp » Update SP3
Apple » Safari » Version: 4.0.0b
cpe:2.3:a:apple:safari:4.0.0b:*:*:*:*:*:*:*
Matching versions
When used together with: Apple » Mac Os X » Version: 10.5
When used together with: Apple » Mac Os X » Version: 10.5.0
When used together with: Apple » Mac Os X » Version: 10.5.1
When used together with: Apple » Mac Os X » Version: 10.5.2
When used together with: Apple » Mac Os X » Version: 10.5.3
When used together with: Apple » Mac Os X » Version: 10.5.4
When used together with: Apple » Mac Os X » Version: 10.5.5
When used together with: Apple » Mac Os X » Version: 10.5.6
When used together with: Apple » Mac Os X » Version: 10.5.7
When used together with: Apple » Mac Os X » Version: 10.5.8
When used together with: Apple » Mac Os X » Version: 10.6.0
When used together with: Apple » Mac Os X » Version: 10.6.1
When used together with: Apple » Mac Os X » Version: 10.6.2
When used together with: Apple » Mac Os X » Version: 10.6.3
When used together with: Apple » Mac Os X Server » Version: 10.5
When used together with: Apple » Mac Os X Server » Version: 10.5.0
When used together with: Apple » Mac Os X Server » Version: 10.5.1
When used together with: Apple » Mac Os X Server » Version: 10.5.2
When used together with: Apple » Mac Os X Server » Version: 10.5.3
When used together with: Apple » Mac Os X Server » Version: 10.5.4
When used together with: Apple » Mac Os X Server » Version: 10.5.5
When used together with: Apple » Mac Os X Server » Version: 10.5.6
When used together with: Apple » Mac Os X Server » Version: 10.5.7
When used together with: Apple » Mac Os X Server » Version: 10.5.8
When used together with: Apple » Mac Os X Server » Version: 10.6.0
When used together with: Apple » Mac Os X Server » Version: 10.6.1
When used together with: Apple » Mac Os X Server » Version: 10.6.2
When used together with: Apple » Mac Os X Server » Version: 10.6.3
When used together with: Microsoft » Windows 7
When used together with: Microsoft » Windows Vista
When used together with: Microsoft » Windows Xp » Update SP2
When used together with: Microsoft » Windows Xp » Update SP3
Apple » Safari » Version: 4.0
cpe:2.3:a:apple:safari:4.0:*:*:*:*:*:*:*
Matching versions
When used together with: Apple » Mac Os X » Version: 10.5
When used together with: Apple » Mac Os X » Version: 10.5.0
When used together with: Apple » Mac Os X » Version: 10.5.1
When used together with: Apple » Mac Os X » Version: 10.5.2
When used together with: Apple » Mac Os X » Version: 10.5.3
When used together with: Apple » Mac Os X » Version: 10.5.4
When used together with: Apple » Mac Os X » Version: 10.5.5
When used together with: Apple » Mac Os X » Version: 10.5.6
When used together with: Apple » Mac Os X » Version: 10.5.7
When used together with: Apple » Mac Os X » Version: 10.5.8
When used together with: Apple » Mac Os X » Version: 10.6.0
When used together with: Apple » Mac Os X » Version: 10.6.1
When used together with: Apple » Mac Os X » Version: 10.6.2
When used together with: Apple » Mac Os X » Version: 10.6.3
When used together with: Apple » Mac Os X Server » Version: 10.5
When used together with: Apple » Mac Os X Server » Version: 10.5.0
When used together with: Apple » Mac Os X Server » Version: 10.5.1
When used together with: Apple » Mac Os X Server » Version: 10.5.2
When used together with: Apple » Mac Os X Server » Version: 10.5.3
When used together with: Apple » Mac Os X Server » Version: 10.5.4
When used together with: Apple » Mac Os X Server » Version: 10.5.5
When used together with: Apple » Mac Os X Server » Version: 10.5.6
When used together with: Apple » Mac Os X Server » Version: 10.5.7
When used together with: Apple » Mac Os X Server » Version: 10.5.8
When used together with: Apple » Mac Os X Server » Version: 10.6.0
When used together with: Apple » Mac Os X Server » Version: 10.6.1
When used together with: Apple » Mac Os X Server » Version: 10.6.2
When used together with: Apple » Mac Os X Server » Version: 10.6.3
When used together with: Microsoft » Windows 7
When used together with: Microsoft » Windows Vista
When used together with: Microsoft » Windows Xp » Update SP2
When used together with: Microsoft » Windows Xp » Update SP3
Apple » Safari » Version: 4.0.1
cpe:2.3:a:apple:safari:4.0.1:*:*:*:*:*:*:*
Matching versions
When used together with: Apple » Mac Os X » Version: 10.5
When used together with: Apple » Mac Os X » Version: 10.5.0
When used together with: Apple » Mac Os X » Version: 10.5.1
When used together with: Apple » Mac Os X » Version: 10.5.2
When used together with: Apple » Mac Os X » Version: 10.5.3
When used together with: Apple » Mac Os X » Version: 10.5.4
When used together with: Apple » Mac Os X » Version: 10.5.5
When used together with: Apple » Mac Os X » Version: 10.5.6
When used together with: Apple » Mac Os X » Version: 10.5.7
When used together with: Apple » Mac Os X » Version: 10.5.8
When used together with: Apple » Mac Os X » Version: 10.6.0
When used together with: Apple » Mac Os X » Version: 10.6.1
When used together with: Apple » Mac Os X » Version: 10.6.2
When used together with: Apple » Mac Os X » Version: 10.6.3
When used together with: Apple » Mac Os X Server » Version: 10.5
When used together with: Apple » Mac Os X Server » Version: 10.5.0
When used together with: Apple » Mac Os X Server » Version: 10.5.1
When used together with: Apple » Mac Os X Server » Version: 10.5.2
When used together with: Apple » Mac Os X Server » Version: 10.5.3
When used together with: Apple » Mac Os X Server » Version: 10.5.4
When used together with: Apple » Mac Os X Server » Version: 10.5.5
When used together with: Apple » Mac Os X Server » Version: 10.5.6
When used together with: Apple » Mac Os X Server » Version: 10.5.7
When used together with: Apple » Mac Os X Server » Version: 10.5.8
When used together with: Apple » Mac Os X Server » Version: 10.6.0
When used together with: Apple » Mac Os X Server » Version: 10.6.1
When used together with: Apple » Mac Os X Server » Version: 10.6.2
When used together with: Apple » Mac Os X Server » Version: 10.6.3
When used together with: Microsoft » Windows 7
When used together with: Microsoft » Windows Vista
When used together with: Microsoft » Windows Xp » Update SP2
When used together with: Microsoft » Windows Xp » Update SP3
Apple » Safari » Version: 4.0.2
cpe:2.3:a:apple:safari:4.0.2:*:*:*:*:*:*:*
Matching versions
When used together with: Apple » Mac Os X » Version: 10.5
When used together with: Apple » Mac Os X » Version: 10.5.0
When used together with: Apple » Mac Os X » Version: 10.5.1
When used together with: Apple » Mac Os X » Version: 10.5.2
When used together with: Apple » Mac Os X » Version: 10.5.3
When used together with: Apple » Mac Os X » Version: 10.5.4
When used together with: Apple » Mac Os X » Version: 10.5.5
When used together with: Apple » Mac Os X » Version: 10.5.6
When used together with: Apple » Mac Os X » Version: 10.5.7
When used together with: Apple » Mac Os X » Version: 10.5.8
When used together with: Apple » Mac Os X » Version: 10.6.0
When used together with: Apple » Mac Os X » Version: 10.6.1
When used together with: Apple » Mac Os X » Version: 10.6.2
When used together with: Apple » Mac Os X » Version: 10.6.3
When used together with: Apple » Mac Os X Server » Version: 10.5
When used together with: Apple » Mac Os X Server » Version: 10.5.0
When used together with: Apple » Mac Os X Server » Version: 10.5.1
When used together with: Apple » Mac Os X Server » Version: 10.5.2
When used together with: Apple » Mac Os X Server » Version: 10.5.3
When used together with: Apple » Mac Os X Server » Version: 10.5.4
When used together with: Apple » Mac Os X Server » Version: 10.5.5
When used together with: Apple » Mac Os X Server » Version: 10.5.6
When used together with: Apple » Mac Os X Server » Version: 10.5.7
When used together with: Apple » Mac Os X Server » Version: 10.5.8
When used together with: Apple » Mac Os X Server » Version: 10.6.0
When used together with: Apple » Mac Os X Server » Version: 10.6.1
When used together with: Apple » Mac Os X Server » Version: 10.6.2
When used together with: Apple » Mac Os X Server » Version: 10.6.3
When used together with: Microsoft » Windows 7
When used together with: Microsoft » Windows Vista
When used together with: Microsoft » Windows Xp » Update SP2
When used together with: Microsoft » Windows Xp » Update SP3
Apple » Safari » Version: 4.0.3
cpe:2.3:a:apple:safari:4.0.3:*:*:*:*:*:*:*
Matching versions
When used together with: Apple » Mac Os X » Version: 10.5
When used together with: Apple » Mac Os X » Version: 10.5.0
When used together with: Apple » Mac Os X » Version: 10.5.1
When used together with: Apple » Mac Os X » Version: 10.5.2
When used together with: Apple » Mac Os X » Version: 10.5.3
When used together with: Apple » Mac Os X » Version: 10.5.4
When used together with: Apple » Mac Os X » Version: 10.5.5
When used together with: Apple » Mac Os X » Version: 10.5.6
When used together with: Apple » Mac Os X » Version: 10.5.7
When used together with: Apple » Mac Os X » Version: 10.5.8
When used together with: Apple » Mac Os X » Version: 10.6.0
When used together with: Apple » Mac Os X » Version: 10.6.1
When used together with: Apple » Mac Os X » Version: 10.6.2
When used together with: Apple » Mac Os X » Version: 10.6.3
When used together with: Apple » Mac Os X Server » Version: 10.5
When used together with: Apple » Mac Os X Server » Version: 10.5.0
When used together with: Apple » Mac Os X Server » Version: 10.5.1
When used together with: Apple » Mac Os X Server » Version: 10.5.2
When used together with: Apple » Mac Os X Server » Version: 10.5.3
When used together with: Apple » Mac Os X Server » Version: 10.5.4
When used together with: Apple » Mac Os X Server » Version: 10.5.5
When used together with: Apple » Mac Os X Server » Version: 10.5.6
When used together with: Apple » Mac Os X Server » Version: 10.5.7
When used together with: Apple » Mac Os X Server » Version: 10.5.8
When used together with: Apple » Mac Os X Server » Version: 10.6.0
When used together with: Apple » Mac Os X Server » Version: 10.6.1
When used together with: Apple » Mac Os X Server » Version: 10.6.2
When used together with: Apple » Mac Os X Server » Version: 10.6.3
When used together with: Microsoft » Windows 7
When used together with: Microsoft » Windows Vista
When used together with: Microsoft » Windows Xp » Update SP2
When used together with: Microsoft » Windows Xp » Update SP3
Apple » Safari » Version: 4.0.4
cpe:2.3:a:apple:safari:4.0.4:*:*:*:*:*:*:*
Matching versions
When used together with: Apple » Mac Os X » Version: 10.5
When used together with: Apple » Mac Os X » Version: 10.5.0
When used together with: Apple » Mac Os X » Version: 10.5.1
When used together with: Apple » Mac Os X » Version: 10.5.2
When used together with: Apple » Mac Os X » Version: 10.5.3
When used together with: Apple » Mac Os X » Version: 10.5.4
When used together with: Apple » Mac Os X » Version: 10.5.5
When used together with: Apple » Mac Os X » Version: 10.5.6
When used together with: Apple » Mac Os X » Version: 10.5.7
When used together with: Apple » Mac Os X » Version: 10.5.8
When used together with: Apple » Mac Os X » Version: 10.6.0
When used together with: Apple » Mac Os X » Version: 10.6.1
When used together with: Apple » Mac Os X » Version: 10.6.2
When used together with: Apple » Mac Os X » Version: 10.6.3
When used together with: Apple » Mac Os X Server » Version: 10.5
When used together with: Apple » Mac Os X Server » Version: 10.5.0
When used together with: Apple » Mac Os X Server » Version: 10.5.1
When used together with: Apple » Mac Os X Server » Version: 10.5.2
When used together with: Apple » Mac Os X Server » Version: 10.5.3
When used together with: Apple » Mac Os X Server » Version: 10.5.4
When used together with: Apple » Mac Os X Server » Version: 10.5.5
When used together with: Apple » Mac Os X Server » Version: 10.5.6
When used together with: Apple » Mac Os X Server » Version: 10.5.7
When used together with: Apple » Mac Os X Server » Version: 10.5.8
When used together with: Apple » Mac Os X Server » Version: 10.6.0
When used together with: Apple » Mac Os X Server » Version: 10.6.1
When used together with: Apple » Mac Os X Server » Version: 10.6.2
When used together with: Apple » Mac Os X Server » Version: 10.6.3
When used together with: Microsoft » Windows 7
When used together with: Microsoft » Windows Vista
When used together with: Microsoft » Windows Xp » Update SP2
When used together with: Microsoft » Windows Xp » Update SP3

Vulnerability Details : CVE-2010-1384

Exploit prediction scoring system (EPSS) score for CVE-2010-1384

CVSS scores for CVE-2010-1384

CWE ids for CVE-2010-1384

References for CVE-2010-1384

Products affected by CVE-2010-1384