CVE-2010-3804

N/A

Published: November 20, 2010 at 09:00 PM UTC

Updated: June 16, 2026 at 11:23 PM UTC

3 products affected across 1 vendorSafarimacOSMac OS X Server· also runs on 3 platforms

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 9%

Description

The JavaScript implementation in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, uses a weak algorithm for generating values of random numbers, which makes it easier for remote attackers to track a user by predicting a value, a related issue to CVE-2008-5913 and CVE-2010-3171.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Safari · Apple

95%

v ≤ 4.1.2v ≤ 5.0.21.0 1.0 beta 1.0 beta2 1.0.0 1.0.0b1 1.0.0b2 1.0.1 1.0.2 1.0.3 1.0.3 85.8 1.0.3 85.8.1 1.1 1.1.0 1.1.1 1.2 1.2.0 1.2.1 1.2.2 1.2.3 1.2.4 1.2.5 1.3 1.3.0 1.3.1 1.3.2 1.3.2 312.5 1.3.2 312.6 2 2.0 2.0.0 2.0.1 2.0.2 2.0.3 2.0.3 417.8 2.0.3 417.9 2.0.3 417.9.22.0.3 417.9.32.0.4 3 3.0 3.0.0 3.0.0b 3.0.1 3.0.1b 3.0.2 3.0.2b 3.0.3 3.0.3b 3.0.4 3.0.4b 3.1.0 3.1.0b 3.1.1 3.1.2 3.2.0 3.2.1 3.2.2 4.1 4.1.1 5.0 5.0.1

apple-mac-os-x-server (environment) · apple-macos (environment) · apple-webkit (environment) · microsoft-windows-7 (environment) · microsoft-windows-vista (environment) · microsoft-windows-xp (environment)

Mac OS X Server · Appledevice

80%

All versions

macOS · Appledevice

80%

All versions