Description
Cross-site scripting (XSS) vulnerability in Web Inspector in WebKit in Apple Safari before 4.0 allows user-assisted remote attackers to inject arbitrary web script or HTML, and read local files, via vectors related to script execution with incorrect privileges.
References
- 54996 vdb-entry
- 1022344 vdb-entry
- 43068 third-party-advisory
- ADV-2011-0212 vdb-entry
- 35349 vdb-entry
- APPLE-SA-2009-06-08-1 vendor-advisory
- 35260 vdb-entry
- ADV-2009-1522 vdb-entry
- SUSE-SR:2011:002 vendor-advisory
- 35379 third-party-advisory
- http://support.apple.com/kb/HT3613