Description
Apple Safari before 3.1.2 on Windows does not properly interpret the URLACTION_SHELL_EXECUTE_HIGHRISK Internet Explorer zone setting, which allows remote attackers to bypass intended access restrictions, and force a client system to download and execute arbitrary files.
References
- VU#127185 third-party-advisory
- 30775 third-party-advisory
- 1020329 vdb-entry
- ADV-2008-1882 vdb-entry
- 29835 vdb-entry
- APPLE-SA-2008-06-19 vendor-advisory