Description
Cross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web script or HTML by using the window.open function to change the security context of a web page.
References
- 28332 vdb-entry
- 1019653 vdb-entry
- TA08-079A third-party-advisory
- APPLE-SA-2008-03-18 vendor-advisory
- 28290 vdb-entry
- safari-windowopen-security-bypass(41326) vdb-entry
- http://docs.info.apple.com/article.html?artnum=307563
- ADV-2008-0920 vdb-entry
- 29393 third-party-advisory