Launch Services in Apple Mac OS X 10.4.11 and 10.5.1 does not treat HTML files as unsafe content, which allows attackers to conduct cross-site scripting (XSS) attacks or obtain sensitive information via a crafted HTML file.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2007-12-19 13:46
Updated : 2017-07-28 18:33
NVD link : CVE-2007-5854
Mitre link : CVE-2007-5854
JSON object : View
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Products Affected
apple
- mac_os_x