Apple Safari May Load HTML 5 Media Elements Automatically
|
|
SecurityTracker Alert ID: 1023167 |
|
SecurityTracker URL: http://securitytracker.com/id/1023167
|
|
CVE Reference:
CVE-2009-2841
(Links to External Site)
|
Date: Nov 12 2009
|
Impact:
Disclosure of user information
|
Fix Available: Yes Vendor Confirmed: Yes
|
Version(s): prior to 4.0.4
|
Description:
A vulnerability was reported in Apple Safari. A remote user can cause remote audio and video resources to be loaded by the target user's browser.
A remote user can create a specially crafted HTML 5 Media Element that, when loaded by the target user, will load the resource. This allows the remote user to, for example, determine if an e-mail has been viewed.
The vulnerability resides in WebKit.
Windows-based system sare not affected.
|
Impact:
A remote user can cause remote audio and video resources to be loaded by the target user's browser.
|
Solution:
The vendor has issued a fix (4.0.4), available via the Apple Software Update application, or Apple's Safari download site at:
http://www.apple.com/safari/download/
Safari for Mac OS X v10.6.1 and v10.6.2
The download file is named: Safari4.0.4SnowLeopard.dmg
Its SHA-1 digest is: 445df542b183fa65fd9df1f7ff4c6af306e6c0b9
Safari for Mac OS X v10.5.7
The download file is named: Safari4.0.4Leopard.dmg
Its SHA-1 digest is: 0aeb54208cdebcafb3206baf11d8649836273f33
Safari for Mac OS X v10.4.11
The download file is named: Safari4.0.4Tiger.dmg
Its SHA-1 digest is: 4ddfd70420e27bab98864a45f291f688d86f5963
The vendor's advisory is available at:
http://support.apple.com/kb/HT3949
|
Vendor URL: support.apple.com/kb/HT3949 (Links to External Site)
|
Cause:
Access control error
|
Underlying OS:
UNIX (OS X)
|
|
Message History:
This archive entry has one or more follow-up message(s) listed below.
|
Source Message Contents
|
Date: Thu, 12 Nov 2009 03:11:48 +0000
Subject: Apple Safari
|
APPLE-SA-2009-11-11-1 Safari 4.0.4
WebKit
CVE-ID: CVE-2009-2841
Available for: Mac OS X v10.4.11, Mac OS X Server v10.4.11,
Mac OS X v10.5.8, Mac OS X Server v10.5.8,
Mac OS X v10.6.1 and v10.6.2, Mac OS X Server v10.6.1 and v10.6.2
Impact: Mail may load remote audio and video content when remote
image loading is disabled
Description: When WebKit encounters an HTML 5 Media Element pointing
to an external resource, it does not issue a resource load callback
to determine if the resource should be loaded. This may result in
undesired requests to remote servers. As an example, the sender of an
HTML-formatted email message could use this to determine that the
message was read. This issue is addressed by generating resource load
callbacks when WebKit encounters an HTML 5 Media Element. This issue
does not affect Safari on Windows systems.
|
|
