Total vulnerabilities in the database
The implementation of Cross-Origin Resource Sharing (CORS) in WebKit, as used in Apple Safari before 4.0.4 and Google Chrome before 3.0.195.33, includes certain custom HTTP headers in the OPTIONS request during cross-origin operations with preflight, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via a crafted web page.
| Software | From | Fixed in |
|---|---|---|
| apple / iphone_os | - | 4.0 |
| apple / safari | - | 4.0.4 |
| google / chrome | - | 3.0.195.33 |
| opensuse / opensuse | 11.2 | 11.2.x |
| opensuse / opensuse | 11.3 | 11.3.x |
| fedoraproject / fedora | 11 | 11.x |
| fedoraproject / fedora | 12 | 12.x |