Apple Safari Directory Traversal
Posted by deepcore on October 15, 2011 – 4:09 am
Apple Safari versions 5.0 and later on Mac OS and Windows are vulnerable to a directory traversal issue with the handling of “safari-extension://” URLs. Attackers can create malicious websites that trigger Safari to send files from the victim’s system to the attacker. Arbitrary Javascript can be executed in the web context of the Safari extension.
Read more from the original source:
Apple Safari Directory Traversal
Post a reply
You must be logged in to post a comment.