CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:C/I:N/A:N
AI Score
Confidence
High
EPSS
Percentile
74.9%
WebKit in Apple Safari before 4.0.3 does not properly restrict the URL scheme of the pluginspage attribute of an EMBED element, which allows user-assisted remote attackers to launch arbitrary file: URLs and obtain sensitive information via a crafted HTML document.
Vendor | Product | Version | CPE |
---|---|---|---|
apple | safari | 1.2.2 | cpe:/a:apple:safari:1.2.2::: |
apple | safari | 3.0.3b | cpe:/a:apple:safari:3.0.3b::: |
apple | safari | 3.2.1 | cpe:/a:apple:safari:3.2.1::: |
apple | safari | beta2 | cpe:/a:apple:safari:beta2::: |
apple | safari | 3.0.1 | cpe:/a:apple:safari:3.0.1::: |
apple | safari | 3.1.0b | cpe:/a:apple:safari:3.1.0b::: |
apple | safari | 1.1.0 | cpe:/a:apple:safari:1.1.0::: |
apple | safari | 3.0.1b | cpe:/a:apple:safari:3.0.1b::: |
apple | safari | 3.0.3 | cpe:/a:apple:safari:3.0.3::: |
apple | safari | 1.0.0b2 | cpe:/a:apple:safari:1.0.0b2::: |
More