medium4.3
CVE-2010-3796
Safari RSS in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 does not block Java applets in an RSS feed, which allows remote attackers to obtain sensitive info…
Impact
Safari RSS in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 does not block Java applets in an RSS feed, which allows remote attackers to obtain sensitive information via a feed: URL containing an applet that performs DOM modifications.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Mac Os X | Versions 10.5.8, 10.6.0, 10.6.1, 10.6.2, 10.6.3, 10.6.4 |
| Apple | Mac Os X Server | Versions 10.5.8, 10.6.0, 10.6.1, 10.6.2, 10.6.3, 10.6.4 |