Rapid7 VulnDB

SUSE Linux Security Advisory: SUSE-SR:2010:015

Back to Search

SUSE Linux Security Advisory: SUSE-SR:2010:015

Severity
10
CVSS
(AV:N/AC:L/Au:N/C:C/I:C/A:C)
Published
08/19/2010
Created
07/25/2018
Added
12/12/2013
Modified
07/04/2017

Description

loader/DocumentThreadableLoader.cpp in the XMLHttpRequest implementation in WebCore in WebKit before r58409 does not properly handle credentials during a cross-origin synchronous request, which has unspecified impact and remote attack vectors, aka rdar problem 7905150.

Solution(s)

  • suse-upgrade-expat
  • suse-upgrade-expat-32bit
  • suse-upgrade-expat-64bit
  • suse-upgrade-expat-x86
  • suse-upgrade-firefox3-atk-devel
  • suse-upgrade-firefox3-atk-doc
  • suse-upgrade-firefox3-cairo-devel
  • suse-upgrade-firefox3-cairo-doc
  • suse-upgrade-firefox3-glib2-devel
  • suse-upgrade-firefox3-glib2-doc
  • suse-upgrade-firefox3-gtk2-devel
  • suse-upgrade-firefox3-gtk2-doc
  • suse-upgrade-firefox3-pango-devel
  • suse-upgrade-firefox3-pango-doc
  • suse-upgrade-gconf2
  • suse-upgrade-gconf2-32bit
  • suse-upgrade-gconf2-x86
  • suse-upgrade-ghostscript-devel
  • suse-upgrade-ghostscript-fonts-other
  • suse-upgrade-ghostscript-fonts-rus
  • suse-upgrade-ghostscript-fonts-std
  • suse-upgrade-ghostscript-ijs-devel
  • suse-upgrade-ghostscript-library
  • suse-upgrade-ghostscript-omni
  • suse-upgrade-ghostscript-x11
  • suse-upgrade-gpg2
  • suse-upgrade-gpg2-lang
  • suse-upgrade-ibmjava2-jre
  • suse-upgrade-ibmjava2-sdk
  • suse-upgrade-ibmjava5-jre
  • suse-upgrade-ibmjava5-sdk
  • suse-upgrade-java-1_4_2-ibm
  • suse-upgrade-java-1_4_2-ibm-devel
  • suse-upgrade-java-1_4_2-ibm-jdbc
  • suse-upgrade-java-1_4_2-ibm-plugin
  • suse-upgrade-java-1_6_0-ibm
  • suse-upgrade-java-1_6_0-ibm-alsa
  • suse-upgrade-java-1_6_0-ibm-fonts
  • suse-upgrade-java-1_6_0-ibm-jdbc
  • suse-upgrade-java-1_6_0-ibm-plugin
  • suse-upgrade-java-1_6_0-sun
  • suse-upgrade-java-1_6_0-sun-alsa
  • suse-upgrade-java-1_6_0-sun-devel
  • suse-upgrade-java-1_6_0-sun-jdbc
  • suse-upgrade-java-1_6_0-sun-plugin
  • suse-upgrade-java-1_6_0-sun-src
  • suse-upgrade-krb5
  • suse-upgrade-krb5-32bit
  • suse-upgrade-krb5-64bit
  • suse-upgrade-krb5-apps-clients
  • suse-upgrade-krb5-apps-servers
  • suse-upgrade-krb5-client
  • suse-upgrade-krb5-devel
  • suse-upgrade-krb5-devel-32bit
  • suse-upgrade-krb5-devel-64bit
  • suse-upgrade-krb5-plugin-kdb-ldap
  • suse-upgrade-krb5-plugin-preauth-pkinit
  • suse-upgrade-krb5-server
  • suse-upgrade-kvirc
  • suse-upgrade-kvirc-devel
  • suse-upgrade-libexpat-devel
  • suse-upgrade-libexpat0
  • suse-upgrade-libexpat0-32bit
  • suse-upgrade-libexpat1
  • suse-upgrade-libexpat1-32bit
  • suse-upgrade-libexpat1-x86
  • suse-upgrade-libgcrypt11
  • suse-upgrade-libgcrypt11-32bit
  • suse-upgrade-libgcrypt11-x86
  • suse-upgrade-libgimpprint
  • suse-upgrade-libgimpprint-devel
  • suse-upgrade-libicecore
  • suse-upgrade-libicecore-devel
  • suse-upgrade-libidl
  • suse-upgrade-libidl-32bit
  • suse-upgrade-libidl-x86
  • suse-upgrade-libiiclib
  • suse-upgrade-libiiclib-devel
  • suse-upgrade-libiksemel
  • suse-upgrade-libiksemel-devel
  • suse-upgrade-libnetlib
  • suse-upgrade-libnetlib-devel
  • suse-upgrade-libpcsclite1
  • suse-upgrade-libpcsclite1-32bit
  • suse-upgrade-libpython2_6-1_0
  • suse-upgrade-libpython2_6-1_0-32bit
  • suse-upgrade-libpython2_6-1_0-x86
  • suse-upgrade-libvorbis
  • suse-upgrade-libvorbis-32bit
  • suse-upgrade-libvorbis-64bit
  • suse-upgrade-libvorbis-devel
  • suse-upgrade-libvorbis-doc
  • suse-upgrade-libvorbis-x86
  • suse-upgrade-libwebkit-1_0-2
  • suse-upgrade-libwebkit-1_0-2-32bit
  • suse-upgrade-libwebkit-devel
  • suse-upgrade-libwebkit-lang
  • suse-upgrade-libxmlrpc
  • suse-upgrade-libxmlrpc-devel
  • suse-upgrade-mozilla-xulrunner190
  • suse-upgrade-mozilla-xulrunner190-32bit
  • suse-upgrade-mozilla-xulrunner190-devel
  • suse-upgrade-mozilla-xulrunner190-gnomevfs
  • suse-upgrade-mozilla-xulrunner190-gnomevfs-32bit
  • suse-upgrade-mozilla-xulrunner190-translations
  • suse-upgrade-mozilla-xulrunner190-translations-32bit
  • suse-upgrade-mozilla-xulrunner190-x86
  • suse-upgrade-mozillafirefox
  • suse-upgrade-mozillafirefox-branding-upstream
  • suse-upgrade-mozillafirefox-translations
  • suse-upgrade-orbit2
  • suse-upgrade-orbit2-32bit
  • suse-upgrade-orbit2-x86
  • suse-upgrade-pcsc-lite
  • suse-upgrade-pcsc-lite-32bit
  • suse-upgrade-pcsc-lite-64bit
  • suse-upgrade-pcsc-lite-devel
  • suse-upgrade-python
  • suse-upgrade-python-32bit
  • suse-upgrade-python-64bit
  • suse-upgrade-python-base
  • suse-upgrade-python-base-32bit
  • suse-upgrade-python-base-x86
  • suse-upgrade-python-curses
  • suse-upgrade-python-demo
  • suse-upgrade-python-devel
  • suse-upgrade-python-doc
  • suse-upgrade-python-doc-pdf
  • suse-upgrade-python-gdbm
  • suse-upgrade-python-idle
  • suse-upgrade-python-mpz
  • suse-upgrade-python-tk
  • suse-upgrade-python-x86
  • suse-upgrade-python-xml
  • suse-upgrade-python-xpcom190
  • suse-upgrade-pyxml
  • suse-upgrade-sap-aio-release
  • suse-upgrade-squidguard
  • suse-upgrade-squidguard-doc
  • suse-upgrade-strongswan
  • suse-upgrade-strongswan-doc
  • suse-upgrade-strongswan-ikev1
  • suse-upgrade-strongswan-ikev2
  • suse-upgrade-strongswan-ipsec
  • suse-upgrade-strongswan-libs0
  • suse-upgrade-strongswan-nm
  • suse-upgrade-webkit-jsc
  • suse-upgrade-xerces-j2
  • suse-upgrade-xerces-j2-demo
  • suse-upgrade-xerces-j2-javadoc-apis
  • suse-upgrade-xerces-j2-javadoc-dom3
  • suse-upgrade-xerces-j2-javadoc-impl
  • suse-upgrade-xerces-j2-javadoc-other
  • suse-upgrade-xerces-j2-javadoc-xni
  • suse-upgrade-xerces-j2-scripts
  • suse-upgrade-xerces-j2-xml-apis
  • suse-upgrade-xerces-j2-xml-resolver
  • suse-upgrade-xmlrpc-c
  • suse-upgrade-xmlrpc-c-devel

References

  • suse-upgrade-expat
  • suse-upgrade-expat-32bit
  • suse-upgrade-expat-64bit
  • suse-upgrade-expat-x86
  • suse-upgrade-firefox3-atk-devel
  • suse-upgrade-firefox3-atk-doc
  • suse-upgrade-firefox3-cairo-devel
  • suse-upgrade-firefox3-cairo-doc
  • suse-upgrade-firefox3-glib2-devel
  • suse-upgrade-firefox3-glib2-doc
  • suse-upgrade-firefox3-gtk2-devel
  • suse-upgrade-firefox3-gtk2-doc
  • suse-upgrade-firefox3-pango-devel
  • suse-upgrade-firefox3-pango-doc
  • suse-upgrade-gconf2
  • suse-upgrade-gconf2-32bit
  • suse-upgrade-gconf2-x86
  • suse-upgrade-ghostscript-devel
  • suse-upgrade-ghostscript-fonts-other
  • suse-upgrade-ghostscript-fonts-rus
  • suse-upgrade-ghostscript-fonts-std
  • suse-upgrade-ghostscript-ijs-devel
  • suse-upgrade-ghostscript-library
  • suse-upgrade-ghostscript-omni
  • suse-upgrade-ghostscript-x11
  • suse-upgrade-gpg2
  • suse-upgrade-gpg2-lang
  • suse-upgrade-ibmjava2-jre
  • suse-upgrade-ibmjava2-sdk
  • suse-upgrade-ibmjava5-jre
  • suse-upgrade-ibmjava5-sdk
  • suse-upgrade-java-1_4_2-ibm
  • suse-upgrade-java-1_4_2-ibm-devel
  • suse-upgrade-java-1_4_2-ibm-jdbc
  • suse-upgrade-java-1_4_2-ibm-plugin
  • suse-upgrade-java-1_6_0-ibm
  • suse-upgrade-java-1_6_0-ibm-alsa
  • suse-upgrade-java-1_6_0-ibm-fonts
  • suse-upgrade-java-1_6_0-ibm-jdbc
  • suse-upgrade-java-1_6_0-ibm-plugin
  • suse-upgrade-java-1_6_0-sun
  • suse-upgrade-java-1_6_0-sun-alsa
  • suse-upgrade-java-1_6_0-sun-devel
  • suse-upgrade-java-1_6_0-sun-jdbc
  • suse-upgrade-java-1_6_0-sun-plugin
  • suse-upgrade-java-1_6_0-sun-src
  • suse-upgrade-krb5
  • suse-upgrade-krb5-32bit
  • suse-upgrade-krb5-64bit
  • suse-upgrade-krb5-apps-clients
  • suse-upgrade-krb5-apps-servers
  • suse-upgrade-krb5-client
  • suse-upgrade-krb5-devel
  • suse-upgrade-krb5-devel-32bit
  • suse-upgrade-krb5-devel-64bit
  • suse-upgrade-krb5-plugin-kdb-ldap
  • suse-upgrade-krb5-plugin-preauth-pkinit
  • suse-upgrade-krb5-server
  • suse-upgrade-kvirc
  • suse-upgrade-kvirc-devel
  • suse-upgrade-libexpat-devel
  • suse-upgrade-libexpat0
  • suse-upgrade-libexpat0-32bit
  • suse-upgrade-libexpat1
  • suse-upgrade-libexpat1-32bit
  • suse-upgrade-libexpat1-x86
  • suse-upgrade-libgcrypt11
  • suse-upgrade-libgcrypt11-32bit
  • suse-upgrade-libgcrypt11-x86
  • suse-upgrade-libgimpprint
  • suse-upgrade-libgimpprint-devel
  • suse-upgrade-libicecore
  • suse-upgrade-libicecore-devel
  • suse-upgrade-libidl
  • suse-upgrade-libidl-32bit
  • suse-upgrade-libidl-x86
  • suse-upgrade-libiiclib
  • suse-upgrade-libiiclib-devel
  • suse-upgrade-libiksemel
  • suse-upgrade-libiksemel-devel
  • suse-upgrade-libnetlib
  • suse-upgrade-libnetlib-devel
  • suse-upgrade-libpcsclite1
  • suse-upgrade-libpcsclite1-32bit
  • suse-upgrade-libpython2_6-1_0
  • suse-upgrade-libpython2_6-1_0-32bit
  • suse-upgrade-libpython2_6-1_0-x86
  • suse-upgrade-libvorbis
  • suse-upgrade-libvorbis-32bit
  • suse-upgrade-libvorbis-64bit
  • suse-upgrade-libvorbis-devel
  • suse-upgrade-libvorbis-doc
  • suse-upgrade-libvorbis-x86
  • suse-upgrade-libwebkit-1_0-2
  • suse-upgrade-libwebkit-1_0-2-32bit
  • suse-upgrade-libwebkit-devel
  • suse-upgrade-libwebkit-lang
  • suse-upgrade-libxmlrpc
  • suse-upgrade-libxmlrpc-devel
  • suse-upgrade-mozilla-xulrunner190
  • suse-upgrade-mozilla-xulrunner190-32bit
  • suse-upgrade-mozilla-xulrunner190-devel
  • suse-upgrade-mozilla-xulrunner190-gnomevfs
  • suse-upgrade-mozilla-xulrunner190-gnomevfs-32bit
  • suse-upgrade-mozilla-xulrunner190-translations
  • suse-upgrade-mozilla-xulrunner190-translations-32bit
  • suse-upgrade-mozilla-xulrunner190-x86
  • suse-upgrade-mozillafirefox
  • suse-upgrade-mozillafirefox-branding-upstream
  • suse-upgrade-mozillafirefox-translations
  • suse-upgrade-orbit2
  • suse-upgrade-orbit2-32bit
  • suse-upgrade-orbit2-x86
  • suse-upgrade-pcsc-lite
  • suse-upgrade-pcsc-lite-32bit
  • suse-upgrade-pcsc-lite-64bit
  • suse-upgrade-pcsc-lite-devel
  • suse-upgrade-python
  • suse-upgrade-python-32bit
  • suse-upgrade-python-64bit
  • suse-upgrade-python-base
  • suse-upgrade-python-base-32bit
  • suse-upgrade-python-base-x86
  • suse-upgrade-python-curses
  • suse-upgrade-python-demo
  • suse-upgrade-python-devel
  • suse-upgrade-python-doc
  • suse-upgrade-python-doc-pdf
  • suse-upgrade-python-gdbm
  • suse-upgrade-python-idle
  • suse-upgrade-python-mpz
  • suse-upgrade-python-tk
  • suse-upgrade-python-x86
  • suse-upgrade-python-xml
  • suse-upgrade-python-xpcom190
  • suse-upgrade-pyxml
  • suse-upgrade-sap-aio-release
  • suse-upgrade-squidguard
  • suse-upgrade-squidguard-doc
  • suse-upgrade-strongswan
  • suse-upgrade-strongswan-doc
  • suse-upgrade-strongswan-ikev1
  • suse-upgrade-strongswan-ikev2
  • suse-upgrade-strongswan-ipsec
  • suse-upgrade-strongswan-libs0
  • suse-upgrade-strongswan-nm
  • suse-upgrade-webkit-jsc
  • suse-upgrade-xerces-j2
  • suse-upgrade-xerces-j2-demo
  • suse-upgrade-xerces-j2-javadoc-apis
  • suse-upgrade-xerces-j2-javadoc-dom3
  • suse-upgrade-xerces-j2-javadoc-impl
  • suse-upgrade-xerces-j2-javadoc-other
  • suse-upgrade-xerces-j2-javadoc-xni
  • suse-upgrade-xerces-j2-scripts
  • suse-upgrade-xerces-j2-xml-apis
  • suse-upgrade-xerces-j2-xml-resolver
  • suse-upgrade-xmlrpc-c
  • suse-upgrade-xmlrpc-c-devel

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;