Safari in Mac OS X 10.3 before 10.3.9 and 10.4 before 10.4.5 allows remote attackers to redirect users to local files and execute arbitrary JavaScript via unspecified vectors involving HTTP redirection to local resources.
The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.
Link | Tags |
---|---|
http://secunia.com/advisories/19064 | third party advisory patch vendor advisory |
http://www.securityfocus.com/bid/16907 | vdb entry patch |
http://securitytracker.com/id?1015713 | vdb entry patch |
http://www.vupen.com/english/advisories/2006/0791 | vdb entry vendor advisory |
http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html | patch vendor advisory |
http://www.us-cert.gov/cas/techalerts/TA06-062A.html | third party advisory us government resource |
https://exchange.xforce.ibmcloud.com/vulnerabilities/25038 | vdb entry |
http://docs.info.apple.com/article.html?artnum=303382 |