Description
The AutoFill feature in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4, allows remote attackers to obtain sensitive Address Book Card information via JavaScript code that forces keystroke events for input fields.
References
- oval:org.mitre.oval:def:11112 vdb-entry signature
- http://support.apple.com/kb/HT4276
- APPLE-SA-2010-07-28-1 vendor-advisory
- 42020 vdb-entry