CVE-2010-3813
Summary
| CVE | CVE-2010-3813 |
|---|---|
| State | PUBLISHED |
| Assigner | apple |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2010-11-22 13:00:18 UTC |
| Updated | 2026-04-29 01:13:23 UTC |
| Description | The WebCore::HTMLLinkElement::process function in WebCore/html/HTMLLinkElement.cpp in WebKit, as used in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4; webkitgtk before 1.2.6; and possibly other products does not verify whether DNS prefetching is enabled when processing an HTML LINK element, which allows remote attackers to bypass intended access restrictions, as demonstrated by an HTML e-mail message that uses a LINK element for X-Confirm-Reading-To functionality. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
MediumAuthentication
NoneConfidentiality
PartialIntegrity
PartialAvailability
NoneAV:N/AC:M/Au:N/C:P/I:P/A:N
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Apple | Mac Os X | 10.5 | All | All | All |
| Operating System | Apple | Mac Os X | 10.5.0 | All | All | All |
| Operating System | Apple | Mac Os X | 10.5.1 | All | All | All |
| Operating System | Apple | Mac Os X | 10.5.2 | All | All | All |
| Operating System | Apple | Mac Os X | 10.5.3 | All | All | All |
| Operating System | Apple | Mac Os X | 10.5.4 | All | All | All |
| Operating System | Apple | Mac Os X | 10.5.5 | All | All | All |
| Operating System | Apple | Mac Os X | 10.5.6 | All | All | All |
| Operating System | Apple | Mac Os X | 10.5.7 | All | All | All |
| Operating System | Apple | Mac Os X | 10.5.8 | All | All | All |
| Operating System | Apple | Mac Os X | 10.6.0 | All | All | All |
| Operating System | Apple | Mac Os X | 10.6.1 | All | All | All |
| Operating System | Apple | Mac Os X | 10.6.2 | All | All | All |
| Operating System | Apple | Mac Os X | 10.6.3 | All | All | All |
| Operating System | Apple | Mac Os X | 10.6.4 | All | All | All |
| Operating System | Apple | Mac Os X | 10.6.5 | All | All | All |
| Operating System | Apple | Mac Os X Server | 10.5 | All | All | All |
| Operating System | Apple | Mac Os X Server | 10.5.0 | All | All | All |
| Operating System | Apple | Mac Os X Server | 10.5.1 | All | All | All |
| Operating System | Apple | Mac Os X Server | 10.5.2 | All | All | All |
| Operating System | Apple | Mac Os X Server | 10.5.3 | All | All | All |
| Operating System | Apple | Mac Os X Server | 10.5.4 | All | All | All |
| Operating System | Apple | Mac Os X Server | 10.5.5 | All | All | All |
| Operating System | Apple | Mac Os X Server | 10.5.6 | All | All | All |
| Operating System | Apple | Mac Os X Server | 10.5.7 | All | All | All |
| Operating System | Apple | Mac Os X Server | 10.5.8 | All | All | All |
| Operating System | Apple | Mac Os X Server | 10.6.0 | All | All | All |
| Operating System | Apple | Mac Os X Server | 10.6.1 | All | All | All |
| Operating System | Apple | Mac Os X Server | 10.6.2 | All | All | All |
| Operating System | Apple | Mac Os X Server | 10.6.3 | All | All | All |
| Operating System | Apple | Mac Os X Server | 10.6.4 | All | All | All |
| Operating System | Apple | Mac Os X Server | 10.6.5 | All | All | All |
| Application | Apple | Safari | 1.0 | All | All | All |
| Application | Apple | Safari | 1.0 | beta | All | All |
| Application | Apple | Safari | 1.0 | beta2 | All | All |
| Application | Apple | Safari | 1.0.0 | All | All | All |
| Application | Apple | Safari | 1.0.0b1 | All | All | All |
| Application | Apple | Safari | 1.0.0b2 | All | All | All |
| Application | Apple | Safari | 1.0.1 | All | All | All |
| Application | Apple | Safari | 1.0.2 | All | All | All |
| Application | Apple | Safari | 1.0.3 | All | All | All |
| Application | Apple | Safari | 1.0.3 | 85.8 | All | All |
| Application | Apple | Safari | 1.0.3 | 85.8.1 | All | All |
| Application | Apple | Safari | 1.1 | All | All | All |
| Application | Apple | Safari | 1.1.0 | All | All | All |
| Application | Apple | Safari | 1.1.1 | All | All | All |
| Application | Apple | Safari | 1.2 | All | All | All |
| Application | Apple | Safari | 1.2.0 | All | All | All |
| Application | Apple | Safari | 1.2.1 | All | All | All |
| Application | Apple | Safari | 1.2.2 | All | All | All |
| Application | Apple | Safari | 1.2.3 | All | All | All |
| Application | Apple | Safari | 1.2.4 | All | All | All |
| Application | Apple | Safari | 1.2.5 | All | All | All |
| Application | Apple | Safari | 1.3 | All | All | All |
| Application | Apple | Safari | 1.3.0 | All | All | All |
| Application | Apple | Safari | 1.3.1 | All | All | All |
| Application | Apple | Safari | 1.3.2 | All | All | All |
| Application | Apple | Safari | 1.3.2 | 312.5 | All | All |
| Application | Apple | Safari | 1.3.2 | 312.6 | All | All |
| Application | Apple | Safari | 2 | All | All | All |
| Application | Apple | Safari | 2.0 | All | All | All |
| Application | Apple | Safari | 2.0.0 | All | All | All |
| Application | Apple | Safari | 2.0.1 | All | All | All |
| Application | Apple | Safari | 2.0.2 | All | All | All |
| Application | Apple | Safari | 2.0.3 | All | All | All |
| Application | Apple | Safari | 2.0.3 | 417.8 | All | All |
| Application | Apple | Safari | 2.0.3 | 417.9 | All | All |
| Application | Apple | Safari | 2.0.3 | 417.9.2 | All | All |
| Application | Apple | Safari | 2.0.3 | 417.9.3 | All | All |
| Application | Apple | Safari | 2.0.4 | All | All | All |
| Application | Apple | Safari | 3 | All | All | All |
| Application | Apple | Safari | 3.0 | All | All | All |
| Application | Apple | Safari | 3.0.0 | All | All | All |
| Application | Apple | Safari | 3.0.0b | All | All | All |
| Application | Apple | Safari | 3.0.1 | All | All | All |
| Application | Apple | Safari | 3.0.1b | All | All | All |
| Application | Apple | Safari | 3.0.2 | All | All | All |
| Application | Apple | Safari | 3.0.2b | All | All | All |
| Application | Apple | Safari | 3.0.3 | All | All | All |
| Application | Apple | Safari | 3.0.3b | All | All | All |
| Application | Apple | Safari | 3.0.4 | All | All | All |
| Application | Apple | Safari | 3.0.4b | All | All | All |
| Application | Apple | Safari | 3.1.0 | All | All | All |
| Application | Apple | Safari | 3.1.0b | All | All | All |
| Application | Apple | Safari | 3.1.1 | All | All | All |
| Application | Apple | Safari | 3.1.2 | All | All | All |
| Application | Apple | Safari | 3.2.0 | All | All | All |
| Application | Apple | Safari | 3.2.1 | All | All | All |
| Application | Apple | Safari | 3.2.2 | All | All | All |
| Application | Apple | Safari | 4.1 | All | All | All |
| Application | Apple | Safari | 4.1.1 | All | All | All |
| Application | Apple | Safari | 5.0 | All | All | All |
| Application | Apple | Safari | 5.0.1 | All | All | All |
| Application | Apple | Safari | All | All | All | All |
| Application | Apple | Safari | All | All | All | All |
| Application | Apple | Webkit | All | All | All | All |
| Operating System | Microsoft | Windows 7 | All | All | All | All |
| Operating System | Microsoft | Windows Vista | All | All | All | All |
| Operating System | Microsoft | Windows Xp | All | sp2 | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| [SECURITY] Fedora 13 Update: webkitgtk-1.2.6-1.fc13 | af854a3a-2127-422b-91ae-364da2661108 | lists.fedoraproject.org | |
| 667024 – (CVE-2010-3813) CVE-2010-3813 webkit: HTMLLinkElement ignores dnsPrefetchingEnabled setting | af854a3a-2127-422b-91ae-364da2661108 | bugzilla.redhat.com | |
| SUSE update for Multiple Packages - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| About the security content of iOS 4.2 | af854a3a-2127-422b-91ae-364da2661108 | support.apple.com | |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | |
| Support / Security / Advisories / / MDVSA-2011:039 | Mandriva | af854a3a-2127-422b-91ae-364da2661108 | www.mandriva.com | |
| [security-announce] SUSE Security Summary Report: SUSE-SR:2011:002 | af854a3a-2127-422b-91ae-364da2661108 | lists.opensuse.org | |
| Repository / Oval Repository | af854a3a-2127-422b-91ae-364da2661108 | oval.cisecurity.org | |
| Bug 42500 – HTMLLinkElement ignores dnsPrefetchingEnabled setting | af854a3a-2127-422b-91ae-364da2661108 | bugs.webkit.org | |
| About the security content of Safari 5.0.3 and Safari 4.1.3 | af854a3a-2127-422b-91ae-364da2661108 | support.apple.com | Patch, Vendor Advisory |
| APPLE-SA-2010-11-22-1 iOS 4.2 | af854a3a-2127-422b-91ae-364da2661108 | lists.apple.com | |
| Apple iOS Multiple Vulnerabilities - Advisories - Community | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| Changeset 63622 – WebKit | af854a3a-2127-422b-91ae-364da2661108 | trac.webkit.org | |
| Webmail - OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | |
| Support | af854a3a-2127-422b-91ae-364da2661108 | www.redhat.com | |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | |
| APPLE-SA-2010-11-18-1 Safari 5.0.3 and Safari 4.1.3 | af854a3a-2127-422b-91ae-364da2661108 | lists.apple.com | Vendor Advisory |
| Red Hat update for webkitgtk - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.