Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
WebKit, as used in Apple Safari 5.1.1 and earlier and Google Chrome 15 and earlier, does not prevent capture of data about the time required for image loading, which makes it easier for remote attackers to determine whether an image exists in the browser cache via crafted JavaScript code, as demonstrated by visipisi.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
WebKit安全漏洞
Vulnerability Description
WebKit是KDE、苹果(Apple)、谷歌(Google)等公司共同开发的一套开源Web浏览器引擎,目前被Apple Safari及Google Chrome等浏览器使用。 WebKit中存在漏洞,该漏洞源于请求图像加载所需的时间里不会阻止数据的采集(在Apple Safari 5.1.1及之前的版本和Google Chrome 15及之前的版本中)。远程攻击者可借助特制的JavaScript代码更容易地确定浏览器缓存中是否存在图像。
CVSS Information
N/A
Vulnerability Type
N/A