Apple Safari WebKit URI Handling Cross-Site Scripting Vulnerability
BID:28814
Info
Apple Safari WebKit URI Handling Cross-Site Scripting Vulnerability
| Bugtraq ID: | 28814 |
| Class: | Input Validation Error |
| CVE: |
CVE-2008-1025 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 16 2008 12:00AM |
| Updated: | Jul 11 2008 07:49PM |
| Credit: | Robert Swiecki of the Google Security Team and David Bloom |
| Vulnerable: |
Apple Safari 3.0.4 Beta for Windows Apple Safari 3.0.3 Beta for Windows Apple Safari 3.0.3 Beta Apple Safari 3.0.2 Beta for Windows Apple Safari 3.0.2 Beta Apple Safari 3.0.1 Beta for Windows Apple Safari 3.0.1 Beta Apple Safari 2.0.4 Apple Safari 2.0.3 Apple Safari 2.0.2 Apple Safari 2.0.1 Apple Safari 1.3.1 Apple Safari 1.3 Apple Safari 1.2.3 Apple Safari 1.2.2 Apple Safari 1.2.1 Apple Safari 1.2 Apple Safari 1.1 Apple Safari 1.0 Apple Safari Beta 2 Apple Safari 3.1 Apple Safari 3 Beta for Windows Apple Safari 3 Beta Apple Safari 3 Apple iPod Touch 1.1.4 Apple iPod Touch 1.1.3 Apple iPod Touch 1.1.2 Apple iPod Touch 1.1.1 Apple iPod Touch 1.1 Apple iPhone 1.1.4 Apple iPhone 1.1.3 Apple iPhone 1.1.2 Apple iPhone 1.1.1 Apple iPhone 1.0.2 Apple iPhone 1.0.1 Apple iPhone 1.1 Apple iPhone 1 Apple iPhone 0 |
| Not Vulnerable: |
Apple Safari 3.1.1 Apple iPod Touch 2.0 Apple iPhone 2.0 |
Discussion
Apple Safari WebKit URI Handling Cross-Site Scripting Vulnerability
Apple Safari WebKit is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.
Attackers may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow attackers to steal cookie-based authentication credentials and to launch other attacks.
This issue affects versions prior to Apple Safari 3.1.1 running on the following platforms:
Mac OS X 10.4.11
Mac OS X 10.5.2
Windows XP
Windows Vista.
Apple Safari WebKit is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.
Attackers may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow attackers to steal cookie-based authentication credentials and to launch other attacks.
This issue affects versions prior to Apple Safari 3.1.1 running on the following platforms:
Mac OS X 10.4.11
Mac OS X 10.5.2
Windows XP
Windows Vista.
Exploit / POC
Apple Safari WebKit URI Handling Cross-Site Scripting Vulnerability
To launch an attack, an attacker must entice an unsuspecting victim into following a malicious URI.
To launch an attack, an attacker must entice an unsuspecting victim into following a malicious URI.
Solution / Fix
Apple Safari WebKit URI Handling Cross-Site Scripting Vulnerability
Solution:
Vendor fixes are available. Please see the referenced advisory for more information.
Apple Safari 3.1
Solution:
Vendor fixes are available. Please see the referenced advisory for more information.
Apple Safari 3.1
-
Apple Safari 3.1.1 for Leopard
Safari for Mac OS X v10.5.2
http://www.apple.com/safari/download/Safari311UpdLeo.dmg -
Apple Safari 3.1.1 Tiger
Safari for Mac OS X v10.4.11
http://www.apple.com/safari/download/Safari311UpdTiger.dmg -
Apple Safari 3.1.1 Windows QuickTime Setup
Safari+QuickTime for Windows XP or Vista
http://www.apple.com/safari/download/SafariQuickTimeSetup.exe -
Apple Safari 3.1.1 Windows Setup
Safari for Windows XP or Vista
http://www.apple.com/safari/download/SafariSetup.exe
References
Apple Safari WebKit URI Handling Cross-Site Scripting Vulnerability
References:
References:
- About the security content of Safari 3.1.1 (Apple)
- Apple Safari Homepage (Apple)