Unscored CVE-2010-1778 EUVD-2010-1798GHSA-5wj9-5hwc-xr22

Cross-site scripting (XSS) vulnerability in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS…

Published Jul 30, 2010 · Updated Aug 7, 2024 · Assigned by apple

Description

Cross-site scripting (XSS) vulnerability in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4, allows remote attackers to inject arbitrary web script or HTML via an RSS feed.

References

http://support.apple.com/kb/HT4276
APPLE-SA-2010-07-28-1 vendor-advisory
42020 vdb-entry
oval:org.mitre.oval:def:11639 vdb-entry signature