Apple Safari before 4.0.5 on Windows does not properly validate external URL schemes, which allows remote attackers to open local files and execute arbitrary code via a crafted HTML document.
References
Configurations
Configuration 1 (hide)
AND |
|
Information
Published : 2010-03-15 06:28
Updated : 2017-09-18 18:30
NVD link : CVE-2010-0045
Mitre link : CVE-2010-0045
JSON object : View
CWE
CWE-20
Improper Input Validation
Products Affected
apple
- safari
microsoft
- windows