Description
Cross-site scripting (XSS) vulnerability in Web Inspector in WebKit in Apple Safari before 4.0 allows user-assisted remote attackers to inject arbitrary web script or HTML, and read local files, via vectors related to the improper escaping of HTML attributes.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.securityfocus.com/bid/35348 ↗
- http://securitytracker.com/id?1022344 ↗
- http://secunia.com/advisories/43068 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51268 ↗
- http://www.vupen.com/english/advisories/2011/0212 ↗
- http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html ↗
- http://www.securityfocus.com/bid/35260 ↗
- http://www.vupen.com/english/advisories/2009/1522 ↗
- http://secunia.com/advisories/37746 ↗
- http://www.debian.org/security/2009/dsa-1950 ↗
- http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html ↗
- http://secunia.com/advisories/35379 ↗
- http://osvdb.org/55023 ↗
- http://support.apple.com/kb/HT3613 ↗