Vulnerability Database

290,020

Total vulnerabilities in the database

CVE-2010-1407

WebKit in Apple iOS before 4 on the iPhone and iPod touch does not properly implement the history.replaceState method in certain situations involving IFRAME elements, which allows remote attackers to obtain sensitive information via a crafted HTML document.

  • Published: Jun 22, 2010
  • Updated: Apr 13, 2023
  • CVE: CVE-2010-1407
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:M/Au:N/C:P/I:N/A:N

CWEs:

Software From Fixed in
apple / iphone_os - 3.2.x
apple / iphone_os 1.0.0 1.0.0.x
apple / iphone_os 1.0.1 1.0.1.x
apple / iphone_os 1.0.2 1.0.2.x
apple / iphone_os 1.1 1.1.x
apple / iphone_os 1.1.0 1.1.0.x
apple / iphone_os 1.1.1 1.1.1.x
apple / iphone_os 1.1.2 1.1.2.x
apple / iphone_os 1.1.3 1.1.3.x
apple / iphone_os 1.1.4 1.1.4.x
apple / iphone_os 1.1.5 1.1.5.x
apple / iphone_os 2.0.0 2.0.0.x
apple / iphone_os 2.0.1 2.0.1.x
apple / iphone_os 2.0.2 2.0.2.x
apple / iphone_os 2.1.1 2.1.1.x
apple / iphone_os 2.2.1 2.2.1.x
apple / iphone_os 3.0 3.0.x
apple / iphone_os 3.0.1 3.0.1.x
apple / iphone_os 3.1.2 3.1.2.x
apple / iphone_os 3.1.3 3.1.3.x