CVE-2005-0341: XSS

Published Feb 10, 2005

Updated

Apple Safari 1.2.4 does not obey the Content-type field in the HTTP header and renders text as HTML, which allows remote attackers to inject arbitrary web script or HTML and perform cross-site scripting (XSS) attacks.

Affected Software

1 affected component

Safari=1.2.4

Event History

Feb 10, 2005

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-0341?

CVE-2005-0341 has been classified as a high severity vulnerability due to its potential for enabling cross-site scripting (XSS) attacks.

How do I fix CVE-2005-0341?

To fix CVE-2005-0341, update to a newer version of Safari that addresses this vulnerability.

What type of attacks can CVE-2005-0341 lead to?

CVE-2005-0341 can lead to cross-site scripting (XSS) attacks, allowing attackers to inject arbitrary web scripts or HTML.

Which versions of Safari are affected by CVE-2005-0341?

CVE-2005-0341 specifically affects Apple Safari version 1.2.4.

Is CVE-2005-0341 still a risk today?

While CVE-2005-0341 pertains to an older version of Safari, users of outdated software may still be at risk if they run this version.