Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Vista
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Re: [Full-disclosure] Apple Safari: urlbar/window title spoofing Jun 14 2007 11:31PM
Robert Swiecki (jagger swiecki net)

> There is a vulnerability in Apple Safari...

Here's another one. With a specially crafted web page, an attacker can
fill the client browser window with an arbitrary content, whereas window
title and the content of the urlbar are freely settable.

Tested with shiny, new, patched Safari 3.0.1 (522....

[ more ]  





 

Privacy Statement
Copyright 2007, SecurityFocus