Unscored CVE-2010-1373 EUVD-2010-1401GHSA-chhx-wx4r-22pq

Cross-site scripting (XSS) vulnerability in Help Viewer in Apple Mac OS X 10.6 before 10.6.4 allows remote attackers to inject arbitrary we…

Published Jun 17, 2010 · Updated Sep 17, 2024 · Assigned by apple

Description

Cross-site scripting (XSS) vulnerability in Help Viewer in Apple Mac OS X 10.6 before 10.6.4 allows remote attackers to inject arbitrary web script or HTML via a crafted help: URL, related to "URL parameters in HTML content."

References

APPLE-SA-2010-06-15-1 vendor-advisory
ADV-2010-1481 vdb-entry
40871 vdb-entry
1024103 vdb-entry
http://support.apple.com/kb/HT4188
40220 third-party-advisory