CVE-2008-1025

Sažetak

Cross-site scripting (XSS) vulnerability in Apple WebKit, as used in Safari before 3.1.1, allows remote attackers to inject arbitrary web script or HTML via a crafted URL with a colon in the hostname portion.

Reference

http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html
http://lists.apple.com/archives/security-announce/2008/Apr/msg00001.html
http://secunia.com/advisories/29846
http://secunia.com/advisories/31074
http://support.apple.com/kb/HT1467
http://www.kb.cert.org/vuls/id/705529
http://www.securityfocus.com/bid/28814
http://www.securitytracker.com/id?1019869
http://www.vupen.com/english/advisories/2008/1250/references
http://www.vupen.com/english/advisories/2008/2094/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/41862

CVSS

Base:	4.3
Impact:	2.9
Exploitability:	8.6

Pristup

Vektor	Složenost	Autentikacija
NETWORK	MEDIUM	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
NONE	PARTIAL	NONE

CVSS vektor

AV:N/AC:M/Au:N/C:N/I:P/A:N

Zadnje važnije ažuriranje

08-08-2017 - 01:29

Objavljeno

17-04-2008 - 19:05