First published: Fri Oct 14 2011(Updated: )
Cross-site scripting (XSS) vulnerability in Safari in Apple iOS before 5 allows remote web servers to inject arbitrary web script or HTML via a file accompanied by a "Content-Disposition: attachment" HTTP header.
Credit: product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
Apple iPhone OS | =4.0 | |
Apple iPhone OS | =4.3.2 | |
Apple iPhone OS | =4.0.2 | |
Apple iPhone OS | =4.0.1 | |
Apple iPhone OS | =3.2 | |
Apple iPhone OS | =4.2.8 | |
Apple iPhone OS | =4.1 | |
Apple iPhone OS | =3.1.2 | |
Apple iPhone OS | =4.3.5 | |
Apple iPhone OS | =3.1.3 | |
Apple iPhone OS | =4.3.1 | |
Apple iPhone OS | =4.2.5 | |
Apple iPhone OS | =3.2.1 | |
Apple iPhone OS | =3.1 | |
Apple iPhone OS | =4.3.5 | |
Apple iPhone OS | =3.1 | |
Apple iPhone OS | =3.2 | |
Apple iPhone OS | =4.3.5 | |
Apple iPhone OS | =4.2.1 | |
Apple iPhone OS | =3.0 | |
Apple iPhone OS | =4.0.1 | |
Apple iPhone OS | =4.3.3 | |
Apple iPhone OS | =4.0.1 | |
Apple iPhone OS | =4.0 | |
Apple iPhone OS | =3.1 | |
Apple iPhone OS | =4.0 | |
Apple iPhone OS | =4.3.0 | |
Apple iPhone OS | =3.2.1 | |
Apple iPhone OS | =3.2.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.