Security Advisory
CVE-2011-3230
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Apple Safari before 5.1.1 on Mac OS X does not enforce an intended policy for file: URLs, which allows remote attackers to execute arbitrary code via a crafted web site.