Description
Cross-site scripting (XSS) vulnerability in Apple WebKit, as used in Safari before 3.1.1, allows remote attackers to inject arbitrary web script or HTML via a crafted URL with a colon in the hostname portion.
References
- http://support.apple.com/kb/HT1467
- 29846 third-party-advisory
- VU#705529 third-party-advisory
- APPLE-SA-2008-04-16 vendor-advisory
- APPLE-SA-2008-07-11 vendor-advisory
- ADV-2008-2094 vdb-entry
- ADV-2008-1250 vdb-entry
- 28814 vdb-entry
- apple-safari-webkit-hostname-xss(41862) vdb-entry
- 1019869 vdb-entry
- 31074 third-party-advisory