Safari in Mac OS X 10.3 before 10.3.9 and 10.4 before 10.4.5 allows remote attackers to redirect users to local files and execute arbitrary JavaScript via unspecified vectors involving HTTP redirection to local resources.
References
Link | Resource |
---|---|
http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html | Patch |
http://www.securityfocus.com/bid/16907 | Patch |
http://secunia.com/advisories/19064 | Patch Vendor Advisory |
http://securitytracker.com/id?1015713 | Patch |
http://docs.info.apple.com/article.html?artnum=303382 | |
http://www.us-cert.gov/cas/techalerts/TA06-062A.html | US Government Resource |
http://www.vupen.com/english/advisories/2006/0791 | Vendor Advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/25038 |
Configurations
Configuration 1 (hide)
|
Information
Published : 2006-03-03 14:02
Updated : 2017-07-19 18:29
NVD link : CVE-2006-0388
Mitre link : CVE-2006-0388
JSON object : View
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')
Products Affected
apple
- mac_os_x
- mac_os_x_server