Описание
WebKit in Apple Safari before 4.0 does not prevent references to file: URLs within (1) audio and (2) video elements, which allows remote attackers to determine the existence of arbitrary files via a crafted HTML document.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| webkit | fixed | 1.1.12-1 | package | |
| webkit | no-dsa | lenny | package | |
| kdelibs | not-affected | package | ||
| kde4libs | not-affected | package | ||
| qt4-x11 | fixed | 4:4.6.2-4 | package | |
| qt4-x11 | not-affected | lenny | package |
Примечания
QT4 might be fixed earlier, but only 4.6.2 was checked against
http://trac.webkit.org/changeset/42533
Связанные уязвимости
WebKit in Apple Safari before 4.0 does not prevent references to file: URLs within (1) audio and (2) video elements, which allows remote attackers to determine the existence of arbitrary files via a crafted HTML document.
WebKit in Apple Safari before 4.0 does not prevent references to file: URLs within (1) audio and (2) video elements, which allows remote attackers to determine the existence of arbitrary files via a crafted HTML document.
WebKit in Apple Safari before 4.0 does not prevent references to file: URLs within (1) audio and (2) video elements, which allows remote attackers to determine the existence of arbitrary files via a crafted HTML document.