WebCore on Apple Mac OS X 10.3.9 and 10.4.10, as used in Safari, does not properly parse HTML comments in TITLE elements, which allows remote attackers to conduct cross-site scripting (XSS) attacks and bypass some XSS protection schemes by embedding certain HTML tags within an HTML comment.

The remote host is running a version of Mac OS X 10.4 or 10.3 which does not have the security update 2007-007 applied. 

This update contains several security fixes for the following programs :

 - bzip2
 - CFNetwork
 - CoreAudio
 - cscope
 - gnuzip
 - iChat
 - Kerberos
 - mDNSResponder
 - PDFKit
 - PHP
 - Quartz Composer
 - Samba
 - SquirrelMail
 - Tomcat
 - WebCore
 - WebKit

The remote host is affected by the vulnerability described in GLSA-200703-10 (KHTML: XSS (XSS) vulnerability)

    The KHTML code allows for the execution of JavaScript code located     inside the 'Title' HTML element, a related issue to the Safari error     found by Jose Avila.
  Impact :

    When viewing a HTML page that renders unsanitized attacker-supplied     input in the page title, Konqueror and other parts of KDE will execute     arbitrary JavaScript code contained in the page title, allowing for the     theft of browser session data or cookies.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Type	Severity
25830	Mac OS X Multiple Vulnerabilities (Security Update 2007-007)	Nessus	MacOS X Local Security Checks	Local	critical
24802	GLSA-200703-10 : KHTML: XSS (XSS) vulnerability	Nessus	Gentoo Local Security Checks	Local	medium

Detections

Analytics

CVE-2007-0478

medium

Tenable Plugins

critical

medium