Oval Definition:oval:org.mitre.oval:def:6888
Revision Date:2013-12-30Version:13
Title:WebKit UTF-7 Encoded Data Cross Site Scripting Vulnerability
Description:Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to inject arbitrary web script or HTML via vectors related to improper UTF-7 canonicalization, and lack of termination of a quoted string in an HTML document.
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2010-1390
Platform(s):Microsoft Windows 7
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Vista
Microsoft Windows XP
Product(s):Apple Safari
Definition Synopsis
  • Apple Safari is installed
  • AND Check if Apple Safari version is less than 5.33.16.0
  • Check if Apple Safari version is less than 5.33.16.0 (From StartMenuInternet)
  • OR Apple Safari version is less than 5.33.16.0
  • BACK