| Package | Affected versions | Patched versions |
|---|---|---|
| safari | = 0.8= 0.9= 1.0= 1.1= 1.2= 1.3= 1.3.1= 1.3.2= 2.0= 2.0.2= 2.0.4= 3.0= 3.0.1= 3.0.2= 3.0.3≤ 3.0.4 |
WebCore, as used in Apple Safari before 3.1, does not enforce the frame navigation policy for Java applets, which allows remote attackers to conduct cross-site scripting (XSS) attacks.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free