« Volver al listado

CVE-2010-1766

Estado: ModificadaAlta (7.5)—

Off-by-one error in the WebSocketHandshake::readServerHandshake function in websockets/WebSocketHandshake.cpp in WebCore in WebKit before r56380, as used in Qt and other products, allows remote websockets servers to cause a denial of service (memory corruption) or possibly have unspecified other impact via an upgrade header that is long and invalid.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Digia — QTWebkit — Webkit

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2010-1766",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "product-security@apple.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2010-07-22T05:42:55.877",
  "references": [
    {
      "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044023.html",
      "source": "product-security@apple.com"
    },
    {
      "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044031.html",
      "source": "product-security@apple.com"
    },
    {
      "url": "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
      "source": "product-security@apple.com"
    },
    {
      "url": "http://secunia.com/advisories/40557",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "product-security@apple.com"
    },
    {
      "url": "http://secunia.com/advisories/41856",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "product-security@apple.com"
    },
    {
      "url": "http://secunia.com/advisories/43068",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "product-security@apple.com"
    },
    {
      "url": "http://trac.webkit.org/changeset/56380",
      "source": "product-security@apple.com"
    },
    {
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:039",
      "source": "product-security@apple.com"
    },
    {
      "url": "http://www.ubuntu.com/usn/USN-1006-1",
      "source": "product-security@apple.com"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2010/1801",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "product-security@apple.com"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2010/2722",
      "source": "product-security@apple.com"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2011/0212",
      "source": "product-security@apple.com"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2011/0552",
      "source": "product-security@apple.com"
    },
    {
      "url": "https://bugs.webkit.org/show_bug.cgi?id=36339",
      "source": "product-security@apple.com"
    },
    {
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=596494",
      "source": "product-security@apple.com"
    },
    {
      "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044023.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044031.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/40557",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/41856",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/43068",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://trac.webkit.org/changeset/56380",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:039",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.ubuntu.com/usn/USN-1006-1",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2010/1801",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2010/2722",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2011/0212",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2011/0552",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://bugs.webkit.org/show_bug.cgi?id=36339",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=596494",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-189"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Off-by-one error in the WebSocketHandshake::readServerHandshake function in websockets/WebSocketHandshake.cpp in WebCore in WebKit before r56380, as used in Qt and other products, allows remote websockets servers to cause a denial of service (memory corruption) or possibly have unspecified other impact via an upgrade header that is long and invalid."
    },
    {
      "lang": "es",
      "value": "Error de superación de límite en la función WebSocketHandshake::readServerHandshake en websockets/WebSocketHandshake.cpp en WebCore en WebKit anterior a r56380, utilizado en Qt y otros productos, permite a los servidores de websockets remotos provocar una denegación de servicio (corrupción de memoria), o posiblemente tener otro impacto no especificado a través de una cabecera de actualización que es larga e inválida."
    }
  ],
  "lastModified": "2026-06-16T23:19:16.817",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:digia:qt:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "75F543EF-AFA9-42EA-B60B-33711005EAB0",
              "versionEndIncluding": "4.6.2"
            },
            {
              "criteria": "cpe:2.3:a:webkit:webkit:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AF922448-569B-440D-9695-3D063848023D",
              "versionEndIncluding": "r56379"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "product-security@apple.com"
}