CVE-2005-0976: Medium severity Hmdt Shiira vulnerability
AppleWebKit (WebCore and WebKit), as used in multiple products such as Safari 1.2 and OmniGroup OmniWeb 5.1, allows remote attackers to read arbitrary files via the XMLHttpRequest Javascript component, as demonstrated using automatically mounted disk images and file:// URLs.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2005-0976?
CVE-2005-0976 is considered a medium severity vulnerability due to its ability to allow remote attackers to read arbitrary files.
How do I fix CVE-2005-0976?
To mitigate CVE-2005-0976, update affected applications like Safari and OmniWeb to their latest versions that patch this vulnerability.
Which versions are affected by CVE-2005-0976?
CVE-2005-0976 affects Apple Safari 1.2, OmniGroup OmniWeb 5.1, and Hmdt Shiira 0.93.
What can attackers do with CVE-2005-0976?
Attackers can exploit CVE-2005-0976 to access and read arbitrary files on a vulnerable system using XMLHttpRequest.
Is CVE-2005-0976 still a risk today?
CVE-2005-0976 is less of a risk today due to the decline in usage of older software versions, but users should still be cautious if using affected applications.