CVE-2008-5914

An unspecified function in the JavaScript implementation in Apple Safari creates and exposes a "temporary footprint" when there is a current login to a web site, which makes it easier for remote attackers to trick a user into acting upon a spoofed pop-up message, aka an "in-session phishing...

CVE-2008-5914

The CVE-2008-5914 entry describes an Apple Safari JavaScript Engine cross-domain information disclosure. The vulnerability arises from an unspecified function in Safari’s JavaScript implementation that creates and exposes a “temporary footprint” when there is an active login to a site, enabling i...