Unscored CVE-2005-0341 EUVD-2005-0342GHSA-g568-w769-v94j

Apple Safari 1.2.4 does not obey the Content-type field in the HTTP header and renders text as HTML, which allows remote attackers to injec…

Published Feb 10, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

Apple Safari 1.2.4 does not obey the Content-type field in the HTTP header and renders text as HTML, which allows remote attackers to inject arbitrary web script or HTML and perform cross-site scripting (XSS) attacks.

References

1013087 vdb-entry
20050204 Input Validation Vulnerability in Apple Safari version 1.2.4 v125.12 mailing-list
http://tigger.uic.edu/~jrockw2/safari_20050204.txt
safari-contenttype-xss(19227) vdb-entry