Back to search
CVE-2010-0541
Published: Jun 17, 2010
Modified: Aug 7, 2024
PUBLISHED
Description
Cross-site scripting (XSS) vulnerability in the WEBrick HTTP server in Ruby in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, allows remote attackers to inject arbitrary web script or HTML via a crafted URI that triggers a UTF-7 error page.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
APPLE-SA-2010-06-15-1
vendor-advisory
x_refsource_APPLE
MDVSA-2011:098
vendor-advisory
x_refsource_MANDRIVA
ADV-2010-1481
vdb-entry
x_refsource_VUPEN
40871
vdb-entry
x_refsource_BID
RHSA-2011:0909
vendor-advisory
x_refsource_REDHAT
40895
vdb-entry
x_refsource_BID
http://support.apple.com/kb/HT4188
x_refsource_CONFIRM
40220
third-party-advisory
x_refsource_SECUNIA
RHSA-2011:0908
vendor-advisory
x_refsource_REDHAT
MDVSA-2011:097
vendor-advisory
x_refsource_MANDRIVA
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now