Re: [Full-disclosure] Apple Safari: urlbar/window title spoofing

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



> There is a vulnerability in Apple Safari...

Here's another one. With a specially crafted web page, an attacker can
fill the client browser window with an arbitrary content, whereas window
title and the content of the urlbar are freely settable.

Tested with shiny, new, patched Safari 3.0.1 (522.12.12) on Windows 2003
SE SP2.

http://alt.swiecki.net/saff.html

-- 
Robert Swiecki
http://www.swiecki.net

[Index of Archives]     [Linux Security]     [Netfilter]     [PHP]     [Yosemite News]     [Linux Kernel]

  Powered by Linux