Release date:
Updated on:
Affected Systems:
Apple Safari 5.1.5 for Windows
Description:
--------------------------------------------------------------------------------
Bugtraq id: 52746
Safari is the browser in Mac OS X, the latest operating system of Apple Computer. It uses KDE's KHTML as the core of browser computing.
The URI Spoofing vulnerability exists in Apple Safari for Windows. Attackers can exploit this vulnerability to fool users.
<* Source: loginon (lostmon@gmail.com)
*>
Test method:
--------------------------------------------------------------------------------
Alert
The following procedures (methods) may be offensive and are intended only for security research and teaching. Users are at your own risk!
Low.on (lostmon@gmail.com) provides the following testing methods:
<! Doctype html public "-// W3C // dtd html 4.01 Transitional // EN "" http://www.example.com/TR/html4/loose.dtd "> <Html>
Suggestion:
--------------------------------------------------------------------------------
Vendor patch:
Apple
-----
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:
Http://support.apple.com/