Description
Apple Safari before 4.0.4 does not properly implement certain (1) Open Image and (2) Open Link menu options, which allows remote attackers to read local HTML files via a crafted web site.
References
- 59942 vdb-entry
- APPLE-SA-2009-11-11-1 vendor-advisory
- ADV-2009-3217 vdb-entry
- http://support.apple.com/kb/HT3949
- 1023164 vdb-entry
- 36994 vdb-entry
- oval:org.mitre.oval:def:5915 vdb-entry signature
- safari-menu-options-info-disclosure(54238) vdb-entry
- 37346 third-party-advisory