Apple Safari before 3.1.2 on Windows does not properly interpret the URLACTION_SHELL_EXECUTE_HIGHRISK Internet Explorer zone setting, which allows remote attackers to bypass intended access restrictions, and force a client system to download and execute arbitrary files.
References
Configurations
Configuration 1 (hide)
AND |
|
Information
Published : 2008-06-23 13:41
Updated : 2011-03-07 19:08
NVD link : CVE-2008-2306
Mitre link : CVE-2008-2306
JSON object : View
CWE
CWE-264
Permissions, Privileges, and Access Controls
Products Affected
microsoft
- windows_xp
- windows_vista
apple
- safari