Description
WebKit in Apple Safari before 4.0 does not prevent references to file: URLs within (1) audio and (2) video elements, which allows remote attackers to determine the existence of arbitrary files via a crafted HTML document.
References
- 43068 third-party-advisory
- ADV-2011-0212 vdb-entry
- APPLE-SA-2009-06-08-1 vendor-advisory
- 35260 vdb-entry
- ADV-2009-1522 vdb-entry
- SUSE-SR:2011:002 vendor-advisory
- 35379 third-party-advisory
- http://support.apple.com/kb/HT3613
- 55009 vdb-entry
- 35333 vdb-entry