CVE-2008-1004

Description

Cross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to the Web Inspector.

References

http://docs.info.apple.com/article.html?artnum=307563

http://lists.apple.com/archives/security-announce/2008/Mar/msg00000.html

http://secunia.com/advisories/29393

http://www.securityfocus.com/bid/28290

http://www.securityfocus.com/bid/28347

http://www.securitytracker.com/id?1019653

http://www.us-cert.gov/cas/techalerts/TA08-079A.html

http://www.vupen.com/english/advisories/2008/0920/references

https://exchange.xforce.ibmcloud.com/vulnerabilities/41331

Details

Risk Information

CVSS v2