CVE-2010-0541

Cross-site scripting (XSS) vulnerability in the WEBrick HTTP server in Ruby in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, allows remote attackers to inject arbitrary web script or HTML via a crafted URI that triggers a UTF-7 error page.

• CWE-79

• http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.htmlVendor Advisory
• http://secunia.com/advisories/40220Vendor Advisory
• http://support.apple.com/kb/HT4188Patch, Vendor Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2011:097
• http://www.mandriva.com/security/advisories?name=MDVSA-2011:098
• http://www.redhat.com/support/errata/RHSA-2011-0908.html
• http://www.redhat.com/support/errata/RHSA-2011-0909.html
• http://www.securityfocus.com/bid/40871Patch
• http://www.securityfocus.com/bid/40895
• http://www.vupen.com/english/advisories/2010/1481Vendor Advisory
• http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.htmlVendor Advisory
• http://secunia.com/advisories/40220Vendor Advisory
• http://support.apple.com/kb/HT4188Patch, Vendor Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2011:097
• http://www.mandriva.com/security/advisories?name=MDVSA-2011:098
• http://www.redhat.com/support/errata/RHSA-2011-0908.html
• http://www.redhat.com/support/errata/RHSA-2011-0909.html
• http://www.securityfocus.com/bid/40871Patch
• http://www.securityfocus.com/bid/40895
• http://www.vupen.com/english/advisories/2010/1481Vendor Advisory

Published

Jun 17, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-0535Dovecot in Apple Mac OS X 10.6 before 10.6.3, when Kerberos …
• CVE-2010-0536Apple QuickTime before 7.6.6 on Windows allows remote attack…
• CVE-2010-0537DesktopServices in Apple Mac OS X 10.6 before 10.6.3 does no…
• CVE-2010-0538Apple Java for Mac OS X 10.5 before Update 7 and Java for Ma…
• CVE-2010-0539Integer signedness error in the window drawing implementatio…
• CVE-2010-0540Cross-site request forgery (CSRF) vulnerability in the web i…
• CVE-2010-0542The _WriteProlog function in texttops.c in texttops in the T…
• CVE-2010-0543ImageIO in Apple Mac OS X 10.5.8, and 10.6 before 10.6.2, al…
• CVE-2010-0544Cross-site scripting (XSS) vulnerability in WebKit in Apple …
• CVE-2010-0545The Finder in DesktopServices in Apple Mac OS X 10.5.8, and …
• CVE-2010-0546Folder Manager in Apple Mac OS X 10.5.8, and 10.6 before 10.…
• CVE-2010-0547client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 an…