Beveiligingsadvies
CVE-2008-1007
CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations
Beschrijving
WebCore, as used in Apple Safari before 3.1, does not enforce the frame navigation policy for Java applets, which allows remote attackers to conduct cross-site scripting (XSS) attacks.