Unscored CVE-2010-1420 EUVD-2010-1448GHSA-4cr6-hvg9-828h

Cross-site scripting (XSS) vulnerability in CFNetwork in Apple Safari before 5.0.6 allows remote attackers to inject arbitrary web script o…

Published Jul 21, 2011 · Updated Sep 17, 2024 · Assigned by apple

Description

Cross-site scripting (XSS) vulnerability in CFNetwork in Apple Safari before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via a crafted text/plain file.

References

http://support.apple.com/kb/HT4808
APPLE-SA-2011-07-20-1 vendor-advisory