NetSight
medium4.3

CVE-2011-0217

Apple Safari before 5.0.6 provides AutoFill information to scripts that execute before HTML form submission, which allows remote attackers to obtain Address Bo…

Impact

Apple Safari before 5.0.6 provides AutoFill information to scripts that execute before HTML form submission, which allows remote attackers to obtain Address Book information via a crafted form, as demonstrated by a form that includes non-visible fields.

Affected products

VendorProductAffected versions
AppleSafari
through 5.0.5
Versions 1.0, 1.0.0, 1.0.0b1, 1.0.0b2, 1.0.1

Weakness classification

References