PT-2005-3416 · Apple · Safari

Bill Kuker · Published 2005-08-19 · Updated 2008-09-05 · CVE-2005-2517

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Low

Base vector

AV:N/AC:H/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Safari versions 10.3.9 through 10.4.2

Description The issue allows form data to be sent to the wrong site when a user browses to the next page after submitting forms from an XSL formatted page.

Recommendations For versions 10.3.9 through 10.4.2, consider disabling the submission of forms from XSL formatted pages until a fix is available.

Fix

Related Identifiers

CVE-2005-2517

Affected Products

Safari

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2005-2517 · Security Note
• http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html · Vendor Advisory