Description
WebKit in Apple Safari before 5.1.7 does not properly track state information during the processing of form input, which allows remote attackers to fill in form fields on the pages of arbitrary web sites via unspecified vectors.
References
- 81787 vdb-entry
- 1027053 vdb-entry
- http://support.apple.com/kb/HT5282
- APPLE-SA-2012-05-09-2 vendor-advisory
- safari-webkit-tracking-sec-bypass(75474) vdb-entry
- 47292 third-party-advisory