CVE-2005-0976
AppleWebKit in Safari and OmniWeb - Arbitrary File Read via XMLHttpRequest
Title source: llmDescription
AppleWebKit (WebCore and WebKit), as used in multiple products such as Safari 1.2 and OmniGroup OmniWeb 5.1, allows remote attackers to read arbitrary files via the XMLHttpRequest Javascript component, as demonstrated using automatically mounted disk images and file:// URLs.
References (2)
Core 2
Core References
Mailing List vendor-advisory
x_refsource_apple
http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html
Exploit x_refsource_misc
http://remahl.se/david/vuln/001/
Scores
EPSS
0.0182
EPSS Percentile
76.6%
Details
Status
published
Products (3)
apple/safari
1.2
hmdt/shiira
0.93
omnigroup/omniweb
5.1
Published
May 02, 2005
Tracked Since
Feb 18, 2026