Description
WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 6.0.472.53, and webkitgtk before 1.2.6, does not properly restrict read access to images derived from CANVAS elements, which allows remote attackers to bypass the Same Origin Policy and obtain potentially sensitive image data via a crafted web site.
References (22)
Core 22
Core References
Third Party Advisory vendor-advisory
x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2011:039
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2010/2722
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/43068
Third Party Advisory vendor-advisory
x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-1006-1
Third Party Advisory x_refsource_confirm
http://support.apple.com/kb/HT4455
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/41856
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2011/0212
Broken Link x_refsource_misc
https://technet.microsoft.com/library/security/msvr11-002
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2010/3046
Third Party Advisory vdb-entry
signature
x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11221
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2011/0216
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/43086
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/44206
Mailing List, Third Party Advisory vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
Mailing List, Third Party Advisory vendor-advisory
x_refsource_apple
http://lists.apple.com/archives/security-announce/2010//Nov/msg00002.html
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/42314
Third Party Advisory vendor-advisory
x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2011-0177.html
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2011/0552
Patch, Vendor Advisory x_refsource_confirm
http://code.google.com/p/chromium/issues/detail?id=53001
Third Party Advisory x_refsource_confirm
http://support.apple.com/kb/HT4456
Vendor Advisory x_refsource_confirm
http://googlechromereleases.blogspot.com/2010/09/stable-and-beta-channel-updates.html
Mailing List, Third Party Advisory vendor-advisory
x_refsource_apple
http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html
Scores
EPSS
0.0160
EPSS Percentile
72.9%
Details
CWE
CWE-200
Status
published
Products (7)
apple/iphone_os
< 4.2
apple/safari
< 4.1.3
canonical/ubuntu_linux
9.10
canonical/ubuntu_linux
10.04
canonical/ubuntu_linux
10.10
google/chrome
< 6.0.472.53
webkitgtk/webkitgtk
< 1.2.6
Published
Sep 07, 2010
Tracked Since
Feb 18, 2026