• info
• discussion
• exploit
• solution
• references

Apple Safari WebKit URI Handling Cross-Site Scripting Vulnerability

Solution:
Vendor fixes are available. Please see the referenced advisory for more information.


Apple Safari 3.1

• Apple Safari 3.1.1 for Leopard
  Safari for Mac OS X v10.5.2
  http://www.apple.com/safari/download/Safari311UpdLeo.dmg


• Apple Safari 3.1.1 Tiger
  Safari for Mac OS X v10.4.11
  http://www.apple.com/safari/download/Safari311UpdTiger.dmg


• Apple Safari 3.1.1 Windows QuickTime Setup
  Safari+QuickTime for Windows XP or Vista
  http://www.apple.com/safari/download/SafariQuickTimeSetup.exe


• Apple Safari 3.1.1 Windows Setup
  Safari for Windows XP or Vista
  http://www.apple.com/safari/download/SafariSetup.exe