CVE-2010-1390

Vulnerability

A cross-site scripting (XSS) vulnerability exists in WebKit as used in Apple Safari. The flaw is due to improper UTF-7 canonicalization and a failure to properly terminate a quoted string within an HTML document [2]. This allows an attacker to inject arbitrary web script or HTML. Affected versions include Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and Safari before 4.1 on Mac OS X 10.4 [2].

Exploitation

An attacker can exploit this vulnerability by crafting a malicious HTML document that, when rendered by a vulnerable version of Safari, triggers the XSS. The attack requires no authentication or special privileges; the victim only needs to visit the attacker-controlled page. The improper UTF-7 canonicalization and unclosed quoted string cause the browser to misinterpret the input, leading to script injection [4].

Impact

Successful exploitation allows the attacker to execute arbitrary web script or HTML in the context of the victim's browser session. This can lead to theft of sensitive information such as cookies, session tokens, or credentials, and may enable actions on behalf of the authenticated user [2][4].

Mitigation

Apple addressed this vulnerability in Safari 5.0 and Safari 4.1, released on June 7, 2010 [2]. Users should update to these versions or later. No workarounds are documented. The vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog.