Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 284144 (CVE-2009-1710)

Summary: [TRACKER] WebKit Address Bar spoofing (CVE-2009-1710)
Product: Gentoo Security Reporter: Alex Legler (RETIRED) <a3li>
Component: VulnerabilitiesAssignee: Gentoo Security <security>
Status: RESOLVED FIXED    
Severity: minor Keywords: Tracker
Priority: High    
Version: unspecified   
Hardware: All   
OS: Linux   
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1710
Whiteboard: B4 [ebuild]
Package list:
Runtime testing required: ---

Description Alex Legler (RETIRED) archtester gentoo-dev Security 2009-09-08 11:04:45 UTC
CVE-2009-1710 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2009-1710):
  WebKit in Apple Safari before 4.0 allows remote attackers to spoof
  the browser's display of (1) the host name, (2) security indicators,
  and unspecified other UI elements via a custom cursor in conjunction
  with a modified CSS3 hotspot property.
Comment 1 Chris Reffett (RETIRED) gentoo-dev Security 2013-09-12 22:09:33 UTC
Presumably all affected versions are gone from tree. Closing as discussed with keytoaster.