CVE-2010-1390

Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 5.0 on Mac OS X 10.5 through 10.6 and Windows Apple Safari versions prior to 4.1 on Mac OS X 10.4

Description The issue is related to a cross-site scripting (XSS) vulnerability in WebKit. It allows remote attackers to inject arbitrary web script or HTML via vectors related to improper UTF-7 canonicalization and lack of termination of a quoted string in an HTML document.

Recommendations For Apple Safari versions prior to 5.0 on Mac OS X 10.5 through 10.6 and Windows, update to version 5.0 or later. For Apple Safari versions prior to 4.1 on Mac OS X 10.4, update to version 4.1 or later.