4 matches found
CVE-2011-3218
The "Save for Web" selection in QuickTime Player in Apple Mac OS X through 10.6.8 exports HTML documents that contain an http link to a script file, which allows man-in-the-middle attackers to conduct cross-site scripting XSS attacks by spoofing the http server during local viewing of an exported...
Cross site scripting
The "Save for Web" selection in QuickTime Player in Apple Mac OS X through 10.6.8 exports HTML documents that contain an http link to a script file, which allows man-in-the-middle attackers to conduct cross-site scripting XSS attacks by spoofing the http server during local viewing of an exported...
CVE-2011-3218: Improper Neutralization of Input During Web Page Generation
The "Save for Web" selection in QuickTime Player in Apple Mac OS X through 10.6.8 exports HTML documents that contain an http link to a script file, which allows man-in-the-middle attackers to conduct cross-site scripting XSS attacks by spoofing the http server during local viewing of an exported...
PT-2011-4311
Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions through 10.6.8 Description The issue allows man-in-the-middle attackers to conduct cross-site scripting XSS attacks. This occurs when the "Save for Web" selection in QuickTime Player exports HTML documents containing an...