• info
• discussion
• exploit
• solution
• references

Apple Safari Subframe Same Origin Policy Violation Vulnerability

Solution:
Apple has released an advisory along with fixes to address this issue. Please see the references for more information.


Apple Mac OS X Server 10.4.11

• Apple Security Update 2007-009 (10.4.11 PPC)
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=16521&cat= 1&platform=osx&method=sa/SecUpd2007-009Univ.dmg


• Apple Security Update 2007-009 (10.4.11 Universal)
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=16521&cat= 1&platform=osx&method=sa/SecUpd2007-009Univ.dmg

Apple Mac OS X 10.4.11

• Apple Security Update 2007-009 (10.4.11 PPC)
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=16521&cat= 1&platform=osx&method=sa/SecUpd2007-009Univ.dmg


• Apple Security Update 2007-009 (10.4.11 Universal)
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=16521&cat= 1&platform=osx&method=sa/SecUpd2007-009Univ.dmg

Apple Mac OS X Server 10.5.1

• Apple Security Update 2007-009 (10.5.1)
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=16527&cat= 1&platform=osx&method=sa/SecUpd2007-009.dmg

Apple Mac OS X 10.5.1

• Apple Security Update 2007-009 (10.5.1)
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=16527&cat= 1&platform=osx&method=sa/SecUpd2007-009.dmg