CVE:CVE-2010-0656
CNNVD:CNNVD-201002-178
WebKit 是一个开源浏览器网页排版引擎，与之相应的引擎有Gecko（Mozilla，Firefox 等使用的排版引擎）和Trident（也称为MSHTML，IE 使用的排版引擎）。
WebKit在Google Chrome中使用时，XMLHttpRequest请求响应存在信息泄露漏洞。在相应路径file:/// URL的XMLHttpRequest请求的响应中呈现目录列表页，远程攻击者可以通过伪造本地HTML文档，获取敏感信息，导致其他未明影响。
solution:Upgrade apple webkit to a higher version than r51280,and avoid the version (,r51280]; Upgrade google chrome to a higher version than *:beta,0.2.149.27,0.2.149.29,0.2.149.30,0.2.152.1,0.2.153.1,0.3.154.0,0.3.154.3,0.4.154.18,0.4.154.22,0.4.154.31,0.4.154.33,1.0.154.36,1.0.154.39,1.0.154.42,1.0.154.43,1.0.154.46,1.0.154.48,1.0.154.52,1.0.154.53,1.0.154.59,1.0.154.65,2.0.156.1,2.0.157.0,2.0.157.2,2.0.158.0,2.0.159.0,2.0.169.0,2.0.169.1,2.0.170.0,2.0.172,2.0.172.2,2.0.172.8,2.0.172.27,2.0.172.28,2.0.172.30,2.0.172.31,2.0.172.33,2.0.172.37,2.0.172.38,3.0.182.2,3.0.190.2,3.0.193.2:beta,3.0.195.21,3.0.195.24,3.0.195.32,3.0.195.33,4.0.244.0,and avoid the version *:beta,0.2.149.27,0.2.149.29,0.2.149.30,0.2.152.1,0.2.153.1,0.3.154.0,0.3.154.3,0.4.154.18,0.4.154.22,0.4.154.31,0.4.154.33,1.0.154.36,1.0.154.39,1.0.154.42,1.0.154.43,1.0.154.46,1.0.154.48,1.0.154.52,1.0.154.53,1.0.154.59,1.0.154.65,2.0.156.1,2.0.157.0,2.0.157.2,2.0.158.0,2.0.159.0,2.0.169.0,2.0.169.1,2.0.170.0,2.0.172,2.0.172.2,2.0.172.8,2.0.172.27,2.0.172.28,2.0.172.30,2.0.172.31,2.0.172.33,2.0.172.37,2.0.172.38,3.0.182.2,3.0.190.2,3.0.193.2:beta,3.0.195.21,3.0.195.24,3.0.195.32,3.0.195.33,4.0.244.0