Vulnerability in Apple Safari

CVE-2010-1805

Untrusted search path vulnerability in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2 on Windows allows local users to gain privileges via a Trojan horse explorer.exe (aka Windows Explorer) program in a directory containing a file that had been downloaded by Safari.

EPSS: 0.003 (22.0th percentile) — read the EPSS interpretation.

Affected products

Apple Safari — versions 5.0.1, 4.1, 4.0.2
Microsoft Windows
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

product-security@apple.com (vendor-advisory, x_refsource_APPLE, Vendor Advisory)
product-security@apple.com (Patch, vdb-entry, x_refsource_BID)
product-security@apple.com (signature, x_refsource_OVAL, vdb-entry)
product-security@apple.com (x_refsource_CONFIRM, Vendor Advisory)