Description
Cross-domain vulnerability in WebCore on Apple Mac OS X 10.3.9 and 10.4.10 allows remote attackers to obtain sensitive information via a popup window, which is able to read the current URL of the parent window.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.vupen.com/english/advisories/2007/2732 ↗
- http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html ↗
- http://securitytracker.com/id?1018494 ↗
- http://docs.info.apple.com/article.html?artnum=306172 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35740 ↗
- http://www.securityfocus.com/bid/25159 ↗
- http://secunia.com/advisories/26235 ↗