WebKit URL Handling Information Disclosure Vulnerability

Bugtraq ID:	48860
Class:	Unknown
CVE:	CVE-2011-0244
Remote:	Yes
Local:	No
Published:	Jul 20 2011 12:00AM
Updated:	Jul 20 2011 12:00AM
Credit:	Jason Hullinger
Vulnerable:	WebKit Open Source Project WebKit 0 Apple Safari 5.0.5 for Windows Apple Safari 5.0.5 Apple Safari 5.0.4 for Windows Apple Safari 5.0.4 Apple Safari 5.0.3 for Windows Apple Safari 5.0.3 Apple Safari 5.0.2 for Windows Apple Safari 5.0.2 Apple Safari 5.0.1 for Windows Apple Safari 5.0.1 Apple Safari 5.0 for Windows Apple Safari 5.0
Not Vulnerable:	Apple Safari 5.0.6 Apple Safari 5.1 for Windows Apple Safari 5.1 Apple Safari 5.0.6 for windows

WebKit URL Handling Information Disclosure Vulnerability

WebKit is prone to an information-disclosure vulnerability.

An attacker can exploit this issue to obtain sensitive information that may lead to further attacks.

NOTE: This issue was previously discussed in 48808 (Apple Safari Prior to 5.1 and 5.0.6 Multiple Security Vulnerabilities) but has been given its own record to better document it.

WebKit URL Handling Information Disclosure Vulnerability

An attacker can exploit the issue by enticing an unsuspecting user to visit a crafted site.

WebKit URL Handling Information Disclosure Vulnerability

Solution:
Updates are available. Please see the reference for more details.

WebKit URL Handling Information Disclosure Vulnerability

References:

• Cisco TelePresence Video Communication Server (VCS) Homepage (Cisco)
  
• Webkit Homepage (WebKit)
  
• APPLE-SA-2011-07-20-1 Safari 5.1 and Safari 5.0.6 (Apple)