PT-2005-3416 · Apple · Safari

Bill Kuker · Publicado 2005-08-19 · Atualizado 2008-09-05 · CVE-2005-2517

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Baixa

Vetor base

AV:N/AC:H/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Safari versions 10.3.9 through 10.4.2

Description The issue allows form data to be sent to the wrong site when a user browses to the next page after submitting forms from an XSL formatted page.

Recommendations For versions 10.3.9 through 10.4.2, consider disabling the submission of forms from XSL formatted pages until a fix is available.

Correção

Identificadores relacionados

CVE-2005-2517

Produtos afetados

Safari

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2005-2517 · Nota de Segurança
• http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html · Aviso do Fabricante
• http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html · Aviso do Fabricante