Common Vulnerabilities and Exposures assigned an identifier CVE-2010-0651 to
the following vulnerability:
WebKit before r52784, as used in Google Chrome before 22.214.171.124 and Apple Safari, permits cross-origin loading of CSS stylesheets even when the stylesheet download has an incorrect MIME type and the stylesheet document is malformed, which allows remote HTTP servers to obtain sensitive information via a crafted document.
See bug #568231 for the bug filed for Firefox (CVE-2010-0654).
The original report for this:
and an upstream WebKit bug report (currently not public):
This has been addressed in Qt via: qt-4.6.2-8.fc12, qt-4.6.2-8.fc11, and qt-4.6.2-8.fc13 (see bug #570349).
Not sure when this was addressed in webkitgtk, but looking at the files in 1.2.0, this is corrected there. This means that Fedora 11 and 12 may still be problematic, but rawhide has 1.2.0 in it.
Adding CVE-2010-0051 as another bug alias based on: