page/Geolocation.cpp in WebCore in WebKit before r56188 and before 1.2.5 does not properly restrict access to the lastPosition function, which has unspecified impact and remote attack vectors, aka rdar problem 7746357.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://www.mandriva.com/security/advisories?name=MDVSA-2011:039 | vendor-advisory x_refsource_MANDRIVA |
| http://security-tracker.debian.org/tracker/CVE-2010-1386 | x_refsource_CONFIRM |
| http://www.vupen.com/english/advisories/2010/2722 | vdb-entry x_refsource_VUPEN |
| http://secunia.com/advisories/43068 | third-party-advisory x_refsource_SECUNIA |
| http://www.ubuntu.com/usn/USN-1006-1 | vendor-advisory x_refsource_UBUNTU |
| http://secunia.com/advisories/41856 | third-party-advisory x_refsource_SECUNIA |
| http://www.vupen.com/english/advisories/2011/0212 | vdb-entry x_refsource_VUPEN |
| http://www.securityfocus.com/bid/42500 | vdb-entry x_refsource_BID |
| http://trac.webkit.org/changeset/56188 | x_refsource_CONFIRM |
| http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html | vendor-advisory x_refsource_SUSE |
| http://www.vupen.com/english/advisories/2011/0552 | vdb-entry x_refsource_VUPEN |
| https://bugs.webkit.org/show_bug.cgi?id=36255 | x_refsource_CONFIRM |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|