CVE-2009-0162

CVE-2009-0162 is an XSS vulnerability in Apple Safari (Mac OS X 10.5 prior to 10.5.7 and Windows; Safari 3.2.3 and 4 Public Beta). The issue arises from multiple input validation flaws in handling feed: URLs, enabling remote attackers to inject arbitrary JavaScript via a crafted feed: URL. Public...