CVE-2005-0976
First published: Mon Apr 18 2005(Updated: )
AppleWebKit (WebCore and WebKit), as used in multiple products such as Safari 1.2 and OmniGroup OmniWeb 5.1, allows remote attackers to read arbitrary files via the XMLHttpRequest Javascript component, as demonstrated using automatically mounted disk images and file:// URLs.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Hmdt Shiira | =0.93 | |
| Apple Mobile Safari | =1.2 | |
| OmniGroup OmniWeb | =5.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2005-0976?
CVE-2005-0976 is considered a medium severity vulnerability due to its ability to allow remote attackers to read arbitrary files.
How do I fix CVE-2005-0976?
To mitigate CVE-2005-0976, update affected applications like Safari and OmniWeb to their latest versions that patch this vulnerability.
Which versions are affected by CVE-2005-0976?
CVE-2005-0976 affects Apple Safari 1.2, OmniGroup OmniWeb 5.1, and Hmdt Shiira 0.93.
What can attackers do with CVE-2005-0976?
Attackers can exploit CVE-2005-0976 to access and read arbitrary files on a vulnerable system using XMLHttpRequest.
Is CVE-2005-0976 still a risk today?
CVE-2005-0976 is less of a risk today due to the decline in usage of older software versions, but users should still be cautious if using affected applications.
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/weakness
- agent/severity
- agent/last-modified-date
- agent/event
- agent/first-publish-date
- agent/description
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/hmdt
- canonical/hmdt shiira
- version/hmdt shiira/0.93
- vendor/apple
- canonical/apple mobile safari
- version/apple mobile safari/1.2
- vendor/omnigroup
- canonical/omnigroup omniweb
- version/omnigroup omniweb/5.1