| Package | Affected versions | Patched versions |
|---|---|---|
| safari | = 6.0= 6.0.1= 6.0.2= 6.0.3= 6.0.4= 6.0.5= 6.1= 6.1.1= 6.1.2= 7.0= 7.0.1= 7.0.2= 7.0.3≤ 6.1.3 |
WebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, does not properly interpret Unicode encoding, which allows remote attackers to spoof a postMessage origin, and bypass intended restrictions on sending a message to a connected frame or window, via crafted characters in a URL.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free