critical9.3
CVE-2010-0045
Apple Safari before 4.0.5 on Windows does not properly validate external URL schemes, which allows remote attackers to open local files and execute arbitrary c…
Impact
Apple Safari before 4.0.5 on Windows does not properly validate external URL schemes, which allows remote attackers to open local files and execute arbitrary code via a crafted HTML document.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Safari | through 4.0.4 Versions 4.0, 4.0.1, 4.0.2, 4.0.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html
- http://support.apple.com/kb/HT4070
- http://www.securityfocus.com/bid/38671
- http://www.securitytracker.com/id?1023706
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6817
- http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html
- http://support.apple.com/kb/HT4070
- http://www.securityfocus.com/bid/38671
- http://www.securitytracker.com/id?1023706
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6817